A level of management needs to be enforced in any network environment to maintain security and organization
assets are things of value to an organization such as computers.
Some common asset management documentation includes things like asset inventory ownership classification
and labeling
configuration management as a set of policies and procedures for maintaining the integrity of a configuration
item a configuration item can be anything from a network router to an application if configurations
need to be changed then a change control process should be followed to notify all parties of any changes.
Then if there are issues with any systems after the documented changes it is very easy to troubleshoot
because you can start by rolling back whatever changed in the system which is the root cause in most
cases change control processes typically include a planning phase detailed documentation of what time
the change will be made and an approval process
patch management systems push out software patch updates to endpoints to fix software vulnerabilities
and bugs if a new threat is introduced that can affect PCs than the patch management system can update
and points to make sure that they are updated for risk reduction.
Vulnerability management is integral to computer security and network security.
It is the practice of identifying classifying remediating and mitigating vulnerabilities.
This can be done with active or passive vulnerability scanners including penetration assessments pen
tests identify vulnerabilities within an environment that need to be corrected to keep things honest.
These are typically conducted by a third party company.