Security and compliance record
Track encryption, patch status and compliance on an asset, against your security frameworks.
For asset types that track security posture, each asset gets a Security & compliance card: encryption, patch status, compliance status, operating system and frameworks.
Switch it on for a type
An Application Administrator ticks Track security posture on the type's Defaults & policy tab. It is off by default. See Asset types.
Edit an asset's security record
- Open the asset and click Edit security on the Security & compliance card.
- In Edit security & compliance, set Encrypted, Patch status (Up to date, Outdated, Unknown) and Compliance (Compliant, Non compliant, Exempt, Unknown).
- Under Operating system, fill in OS name, OS version and Last seen.
- Pick the Frameworks that apply, and add Notes.
- Click Save.
An asset marked Non compliant gets a red dot in the asset list, counts on the Dashboard under Needs attention, and appears under the Non-compliant filter.
Who can do thisTechnicianApplication Administrator
Security frameworks
The frameworks offered as chips come from a list kept under AdministrationSecurity frameworks. A new workspace has GDPR, ISO 27001 and NIS2.
- Type a name, for example SOC 2, and click Add.
- Click Remove to stop offering one.
Frameworks are stored as text on each asset, so removing one from the list never strips it from an asset; it just stops being offered for new picks. An asset can carry at most 20 frameworks, each up to 64 characters.
Who can do thisApplication Administrator