Inventory

Inventory is not an independent module but is rather a basic function available in all modules.

Inventory data

SeCube’s configuration database, the so-called “Inventory”, is used to record and illustrate the company’s organizational structure, the structure of its sites, inventory elements, data assets, and business processes, including certain attributes and relationships of such business processes, i.e. the configuration items and their relationships defining the structure and operation of the organization. The Inventory thus meets all of the requirements of an Information Security Management System asset item inventory.

The main groups of storable configuration items and the types of configuration elements under them can be freely specified:

• Organizational structure and human resources
• Site structure
• Assets and resources (physical and logical resources)
• Data assets
• Services and systems
• Data processing activities (GDPR)
• Business and production processes
• Products and business-services
• Security measures

Inventory provides a necessary basis for workflow implemented in other SeCube modules. Completely filling up the Inventory is not a requirement for the operation of the functions based on it.

Inventory capabilities

• Asset item inventory management and records
• Data maintenance tasks that can be read via responsibility-based privilege management
• Visual display: resource dependencies and operating models can be viewed as and exported to visual graphs. The ability to create figures of system structures.
• The resources stored in the Inventory can be classified into security classes (separately according to Confidentiality, Integrity, and Availability) manually or based on BIA assessments.

• Validation tests

• • The Inventory has real-time consistency testing. When modifying, the Inventory checks existing dependencies and structure, if the state following the change is consistent. 

• Handling multiple inventories

• • All modules include separate Inventories. The choice can be made to handle multiple Inventories or just one.
  • Compare Inventory versions, Import functions.

• Inventory data storage can be customized, even at the field level
• Full export and import capabilities, MS Excel add-in and CMDB integration

Simulation tests

• CIA damage simulation tests and event chains can be freely run on the visual dependency graphs created based on resource relationships.
• The ability to run ad hoc impact assessments, risk analyses, and incident simulations.
• Single point of failure identification.

Customizable Inventory structure

The Inventory structure is flexible and parameterizable.  The fundamental requirement set for the software was to ensure the full customizability of the Inventory, since companies of various industries have different instruments and models of operation.

• Modifiable configuration items: The Inventory has a wide resource datasheet set (e.g. physical server, job description, process, virtual machine). The default datasheets can be fully customized, even at the field level.
• New configuration items: New resource datasheets can also be created and inserted as needed (e.g. radio tower, truck, PLC, fermenting vessel) into the operation model, and new dependency relations can be defined that are integrated into the company operation model.

Due to the flexibility of Inventory, these capacities enable the software to map the data structure of existing registries and can also be integrated with it.

MS Excel add-in component

The Excel Add-in is an own extension to be installed under MS Excel with its own functionality. With its help, the online software interface as well as an MS Excel component is used to support online Inventory editing, export, and import.

• Bulk Excel import / export possibilities 
• Data modification in large quantities, data loading

ETL module

The purpose of the ETL (Extract – Transfer – Load) function is the configurable import (manual or automatic) of information extracted from CMDB or other sources into the SeCube Inventory database.

• Creation of automatic and scheduled import jobs, source change monitoring
• Import from multiple data sources, transforming, making data relations and loading
• Import result snapshot Inventories, reconciliation functions, import logs

Inventory results

• Company resource management, exportable records (Excel, Word)
• System and process operation and dependency figures and simulations
• Dependency matrices
• Data asset inventory, Process inventory, IT service catalogue
• Records of GDPR data processing activities