What best practices have you found for taking inventory of all the systems and applications in your organization (including shadow IT)? How are you tracking and managing your inventory?
Sort By:
Oldest
Director in Manufacturing2 years ago
One of the best things we did is compare tools that can compile inventory like data. For example, your antivirus software likely reports total number of hosts its installed on, and the version of OS. How does that compare to your Service Now Inventory? Service Now only shows 5,000 Windows servers, but your AntiVirus says 9,000 were touched in the last 24 hours? Seems like you may have a reporting gap. Many times we could do this comparison just on the raw numbers and confirm we still had a lot more systems to add to Service Now inventory.Director Global Network / Security Architecture and Automation in Finance (non-banking)2 years ago
Any inventory of infrastructure assets must be driven by automation. They need robust discovery mechanisms and an accessible API. The challenge of Shadow IT is those devices are probably configured to hide themselves but disabling things like CDP or LLDP. They also probably do not have SNMP configured to standards so they are hard to discover. However in order to be more than just a passive brick they need to be part of the forwarding plane. some more invasive discovery tools can also use routing and Next Hop information to best identify these rouge devices. It is also possible to use MAC tables to look for OUI identifiers of MAC addresses for Networking vendors again to find the shadow IT. Above all if it is dependent on a human entering data in a consistent fashion its dead before it even starts.
CIO in Education2 years ago
Agree with - automation - look at tools (e.g. Zluri, Tanium) to get the best picture of what's happening in your environment.