Creating Asset Inventory

Evaluating and selecting asset inventory solution

Why is Asset Inventory Important?

Before implementing any anomaly detection product or security controls, it’s necessary to have comprehensive network diagrams. This requires defining, inventorying, and categorizing the computer systems and applications within the industrial control system (ICS), as well as the networks within—and interfacing to—the ICS.

Asset inventory management is considered one of the most important capabilities for an organization to be able to defend against ransomware and other targeted malware threats. The importance of having a good asset inventory and network diagram really is critical for a number of reasons.  If you don’t know an asset exists, you can’t protect it, you can’t assess the cyber risk for it and from it.  It’s also important from an engineering perspective for modifications, network expansions, and for installing things like security controls, backup & recovery, patch management etc. Knowing what your assets are and where they are may also be critical in an incident response and recovery..

Description of the Service

aeSolutions offers a service to develop the user requirements and assist through evaluation, selection and piloting of the solution. A typical project would include:

  • Requirements Workshop: aeSolutions will conduct an in-person workshop to develop requirements for asset inventory management. This includes identifying standard architectures, inventory of applications, configuration management, use cases, etc.

  • Develop Evaluation Criteria: Develop evaluation criteria based on results from the Requirements Workshop. The evaluation criteria will have a short term as well as longer term focus to ensure that selected products and solutions will scale across the enterprise.


  • Develop Vendor Shortlist: Generate a short list of products to evaluate. aeSolutions will develop a questionnaire and send it to a potential list of vendors. The responses to the questionnaire will be evaluated and vendors will be short listed (typically 2 – 3 vendors).

  • aeSolutions has developed a methodology for asset owners to gather ICS inventory data using existing tools and store them in a central database for analysis and reporting.

Learn more about the different methods of creating asset inventories


Service Deliverables

  • Initial inventory collection

  • Asset inventory requirements

  • Evaluation criteria

  • Vendor responses to questionnaire

  • Shortlist of vendors to further evaluate through pilot test

  • Pilot testing support

  • Deployment support

  • Maintenance Support

Learn more about methods of creating and maintaining OT Asset Inventories: