Subcontrol 2.5

[adammontville]

The software inventory system should be tied into the hardware asset inventory so all devices and associated software are tracked from a single location.(What does tied mean???)

Measures

n = # of machine
w_i = weight of machine i [0-1]
S_i = # of total software in machine i
S_t_i = # of tracked software in machine i

Metrics

Tracking quality = (SUM over i to n((S_t_i /S_i) * w_i)) / (SUM over i to n(w_i))

[adammontville]

Inputs:

• EI: Endpoint inventory

Operations:

• Enumerate software inventory systems from the endpoint inventory
• Enumerate hardware inventory systems from the endpoint inventory
• For each software inventory system, examine its configuration to ensure that it is tied to at least one hardware inventory system, noting appropriately and inappropriately configured software inventory systems

Measures:

• M1 = List of software inventory systems
• M2 = List of hardware inventory systems
• M3 = List of appropriately configured software inventory systems
• M4 = List of inappropriately configured software inventory systems
• M5 = |M1|
• M6 = |M2|
• M7 = |M3|
• M8 = |M4|

Metrics:

• M7 / M5 = Ratio of appropriately configured software inventory systems to the number of software inventory systems.