Request a proposal
Free Assessment
Cyber Risk Management
Risk Assessments
Security Posture AssessmentFreeCyber Risk Scoring GuideFreeCyber Risk Scorecard + Mitigation Plan$997Security Risk Assessment$997
Technology & AI Risk
Emerging Tech Risk RadarFreeShadow AI Discovery ChecklistFreeAI Acceptable Use Policy Pack$300Emerging Technology Risk Playbook$300AI Attack Surface Report$300Technology Risk Monitoring Retainer$300/moTechnology Risk Management Assessment$497Enterprise Security Modernization Roadmap$4,997
Vulnerability Management
Free Dark Web Scan + Security AuditFreeVulnerability Scan Report$300
Cyber Security Solutions
Threat Intelligence
Free Training: Attacker Threat BriefingFreeDefender Circle$300/mo · $397/yrMulti-Modal Threat Intelligence Program$3,500/mo
Email Security
Phishing and Social Engineering Audit$1,000
Cloud & Data Security
Data Security Governance Starter FrameworkFreeRealtime Adaptive Decisioning$12,500
Cyber Security Operations
Managed Detection & Response
AI-MDR Essentials$597/moAI-MDR Complete$1,197/moAI-Powered MDR Security Plans$397–$2,497/mo
Incident Response
Ransomware Response PlaybookFreeRansomware Readiness ChecklistFreeTier 3 Managed Retainer$6,500/moRansomware Containment Readiness$2,997
AI Threat Detection
AI Threat Exposure AssessmentFreeAI Traffic Anomaly Report$300
Cyber Security Defenses
Endpoint Security
Endpoint Security Scorecard$300Endpoint Security Servicesfrom $497Managed Endpoint Security Plans$300–$797/mo
Application Security
Application Security Pack$300AI Red Team Prompt Injection Kit$300
Network & Infrastructure Security
IoT Attack Surface Report$300Application Dependency Mapping$2,497Microsegmentation Design & Rollout$6,997
Compliance Services
HIPAA Compliance
HIPAA Risk Assessment WorksheetFreeHIPAA Compliance Package$12,500
Compliance Readiness
Compliance Readiness Assessment$997Security Compliance Suite$2,497/moFractional CISO Program$3,500/mo
Vendor & Third-Party Risk
Trust Center Care Plan$300/moCybersecurity Trust Center Build$4,997
HomeAboutBlogContactRequest a proposal

Laptops, phones, tablets and shared office equipment move around. People join and leave, devices are swapped, and a spare laptop ends up in a drawer. A device inventory keeps a current answer to a simple question: which devices does the organization have, who has each one, and what can each one reach?

This article is general information about documentation and planning. It is not legal, compliance or security advice. Recovery targets and technical configuration are decisions for your organization to make with qualified professionals and to record in your own documents, and which obligations apply to you varies by organization, industry and jurisdiction.

Why it matters for continuity

When a device is unavailable, the first questions are whose it is, what it was used for and what else depends on it. An inventory answers those quickly. It also links to your dependency map, because the people and processes in the map rely on the devices in the inventory.

What to record for each device

FieldWhat to write
DeviceA name or asset tag that matches a label on the device
TypeLaptop, phone, tablet, printer or other
OwnerThe person who has it, or the team for shared equipment
LocationWhere it usually is: an office, a home, a storeroom
Systems reachedWhich company systems it is used to reach
IssuedWhen it was issued to the current owner
ReturnedWhen it came back, for devices no longer in use
NotesAnything a later reader would need

How to build it

  1. Start with what you know. List devices from purchase records, the people who look after equipment and a walk around each location.
  2. Ask each person. A short message asking everyone to list the company devices they hold fills most gaps.
  3. Label the devices. Match each device to its inventory name so the two stay linked.
  4. Mark the unknowns. Any device nobody can account for becomes an open question with an owner.

Keeping it current

Tie the inventory to two moments:

  • When someone joins, add the devices they are issued.
  • When someone leaves or changes role, record which devices come back and when.

Review the whole inventory on a cadence your organization chooses and writes down. Record each review with its date, who took part and what changed. Keep superseded versions rather than overwriting them.

What it is not

The inventory records what exists and who has it. It does not show that any device is safe or set up correctly. How devices are configured is a decision for your organization to make with qualified professionals.

For worksheets and checklists you can start from, see the Free Resources page on this site.

Editorial & AI Disclosure