Which processes ensure asset enumeration and inventory, verifying compliance with configuration baselines and detecting tampering?

Which processes ensure asset enumeration and inventory, verifying compliance with configuration baselines and detecting tampering?

• A. Data Historian
• B. IoT
• C. Zero Trust
• D. Monitoring/Asset Tracking

Answer: (D)

Keeping an up-to-date inventory of all assets and continuously monitoring their state against approved baselines is essential for secure operations. This approach, known as Monitoring/Asset Tracking, provides real-time visibility into what devices and systems exist, what configurations they’re running, and whether they adhere to established baselines. It also detects tampering by flagging deviations from expected configurations or unauthorized changes, enabling rapid investigation and remediation. Data Historian mainly collects time-series data from industrial processes, not the ongoing discovery or configuration enforcement of assets. IoT refers to the devices themselves, not the process of inventorying and validating their configurations. Zero Trust is a security model focused on verifying every access request, not the continuous asset enumeration and baseline-compliance monitoring that detects tampering.

Keeping an up-to-date inventory of all assets and continuously monitoring their state against approved baselines is essential for secure operations. This approach, known as Monitoring/Asset Tracking, provides real-time visibility into what devices and systems exist, what configurations they’re running, and whether they adhere to established baselines. It also detects tampering by flagging deviations from expected configurations or unauthorized changes, enabling rapid investigation and remediation.

Data Historian mainly collects time-series data from industrial processes, not the ongoing discovery or configuration enforcement of assets. IoT refers to the devices themselves, not the process of inventorying and validating their configurations. Zero Trust is a security model focused on verifying every access request, not the continuous asset enumeration and baseline-compliance monitoring that detects tampering.