Lion Cipher Lab
Build an asset inventory
- GRC / Compliance
- Beginner
- ~60 min
- Free · no account required
Why it matters
There is one sentence the whole security field quietly runs on: you can't protect what you don't know you have. Patching, backups, multi-factor authentication, monitoring, incident response — every one of those controls is an instruction that begins "for each of your assets, ...", and it is worthless if the list of assets is wrong or missing. That is exactly why CIS Critical Security Control 1 (enterprise assets) and Control 2 (software assets) sit at the very top of the list, and why the NIST Cybersecurity Framework puts the Identify Function before Protect, Detect, Respond, and Recover. The…
What you'll learn
- asset inventory
- asset discovery
- classifying data by sensitivity
- rating criticality
- finding shadow IT
- CIS Control 1 and 2
- NIST CSF Identify
- keeping an inventory living
Steps in this lab
- The five words this lab runs on
- Why the list comes before every other control
- Open your inventory and set the columns
- Enumerate your devices — and find the ones you forgot
- Enumerate accounts, cloud services, and software
- Map your data stores, then rate sensitivity and criticality
- Keep it living — because an inventory rots instantly
- What you just built — and the habit that outlasts it