https://speakerdeck.com/arkenoi 2018-12-11 03:30:57 -0500 Here are slides from my UISGCON14 talk in Kyiv -- it was on "fast track" so I had just 20 minutes, so it is not as detailed as I wish it to be. However, the central topic is obvious: if you do asset management for infosec purposes, you are mostly on your own. ITSM-originated asset management focuses on service availability and expenses (and downtime costs); so-called Software Asset Management is a fancy word for keeping count of your licenses, and CMDBs simply cannot work as intended at scale. Here are slides from my UISGCON14 talk in Kyiv -- it was on "fast track" so I had just 20 minutes, so it is not as detailed as I wish it to be. However, the central topic is obvious: if you do asset management for infosec purposes, you are mostly on your own. ITSM-originated asset management focuses on service availability and expenses (and downtime costs); so-called Software Asset Management is a fancy word for keeping count of your licenses, and CMDBs simply cannot work as intended at scale. Fri, 26 Oct 2018 00:00:00 -0400 https://speakerdeck.com/arkenoi/a-very-sketchy-view-of-asset-management-problem-from-the-infosec-perspective https://speakerdeck.com/arkenoi/a-very-sketchy-view-of-asset-management-problem-from-the-infosec-perspective