Asset Inventory Overview

The Asset Inventory provides a centralized view of your organization’s assets, including computers, cloud resources, repositories, and more. This makes it easy to track what systems exist in your environment, monitor their compliance status, and ensure required security controls are in place.

From here, you can view device details, check compliance settings (like HD encryption, antivirus, password policy, screen lock, and firewall), and take action on any items that need attention.

The Asset Inventory is organized into four main tabs to help you manage various types of assets related to your security program:

• Devices: End-user machines tracked via the Secureframe Agent.

• Infrastructure: Core components such as databases, snapshots, and gateways that are pulled directly from connected cloud accounts.

• Repositories: Source code repositories (e.g., GitHub) linked to your environment.

• Tickets: Remediation or issue tickets (e.g., from Jira) mapped to your frameworks and controls.

Each tab provides a tailored view with relevant columns for that asset type.

Assigning, Reassign or Removing an Owner from an Asset

You can update ownership for Computers, Cloud Resources, and Repositories. Ownership helps establish accountability and clarity around asset management.

Important note: Asset owners must be chosen for every inventory asset within the Secureframe platform and should be kept up-to-date as necessary to maintain standard compliance. 

Below are the following methods for assigning assets:

• Bulk Option: Select 1 or more assets using the checkbox next to each name, then select Assign Owner from the pop-up at the bottom of the screen. 
• Manual Option: Use the 3 dot menu next to any asset and click Assign Owner.

• Default Setting: Use the 3 dot menu at the top of your Asset table to set Default Owner for all assets.

• Note: If you’ve incorrectly assigned an owner to an asset (such as a repository, computer, or cloud resource), you can easily correct it using the three-dot menu and selecting Assign Owner.

Mark Devices In Scope or out of Scope

There are also multiple ways to mark assets in our out of scope in Secureframe.

Head to the Asset Inventory section from the left sidebar menu

1. Bulk option: Select 1 or more assets using the checkbox next to each name, then select Edit Framework scope from the pop-up at the bottom of the screen. 
2. Manual Option: Use the 3 dot menu next to any asset and click Mark In scope or Mark Out of Scope
   

Asset Inventory Computer checks

If you are using one of our Mobile Device Management (MDM) integrations, Secureframe will track a lot of helpful data which will be located in the Asset Inventory page, under the Computers tab.

From here you will see the following:

• Asset Name
• Last Check-in - shows when we last received data from the device
• OS Version - Ex, macOS 13.4
• Source - Ex, Secureframe Agent, Ripping, etc..
• Asset Owner
• Framework Scope
• HD Encryption
• Anti-Virus
• Password Policy
• Screen Lock
• Firewall

When viewing computers in your Asset Inventory, each check is represented by an icon. Here’s what they mean:

• ✅ (Green/White Check mark) – The check is passing.

• ❌ (X mark) – The check is failing.

• ❓ (Question mark) – The check is NULL, meaning we don’t have any data for the check. This often indicates that the check is unsupported for the integration(s) the customer has connected.

Asset Table: Filters and Columns

The Asset Table in Secureframe allows you to customize and narrow down your view of assets using filters and columns. This helps you quickly find relevant information based on specific criteria.

Filters

You can apply filters to narrow down the asset list based on values such as ID, Name, Account, Cloud tags, Vendor, and more.

To access filters:

1. Click the Filters tab on the right-hand panel.

2. Use the dropdowns to apply filters such as:

   • Cloud tags: Contains, Does not contain, Is exactly, Is not exactly, Is empty, Is not empty

   • Other filters include: Account, Vendor, Owner, Type, Location, and Frameworks

You can also click Save view... to store a custom filter set for future use.

Columns

Customize which asset properties you want to show in the table.

To edit visible columns:

1. Click the Columns tab in the right-hand panel.

2. Toggle columns on/off such as:

   • Name

   • Account

   • Type

   • Cloud tags

   • Vendor

   • Owner

   • Location

   • Date added

   • Framework scope

You can also choose which columns you want shown or click Reset columns to return to the default view.

Uploading CSVs for Computers

In the Computers tab, you have the option to Upload CSV to import devices in bulk. This is especially useful if you're not using the Secureframe Agent or want to supplement your device inventory.

To do this:

• Click the Upload CSV button in the top-right corner.

• Use the provided template to ensure correct formatting.

• Review and confirm the imported data.

Tickets Tab

The Tickets tab shows issue tickets pulled from integrations like Jira. Each ticket includes metadata such as labels, issue type, framework scope, and current status.

This gives you a centralized view of remediation efforts tied to your compliance program and control gaps.

Frequently Asked Questions (FAQ)

Why do some computer checks show a ❓ (question mark) in Asset Inventory?

Some Secureframe Agent checks may temporarily show a ❓ icon instead of a pass ✅ or fail ❌. This doesn’t necessarily mean something is wrong with your device.

• What it means: The ❓ icon indicates that the check returned no data at the time of the scan.

• Why it happens: Certain information requires a user to be logged in and active on the device for the Secureframe Agent to capture it. If that data isn’t available, the check will temporarily show a ❓.

• How it resolves: Once the device provides the needed information, the check will automatically update to ✅ or ❌.

Can you rename assets in the Secureframe Platform?

• No, those edits would need to be done on the device and the Agent will pick up the new name on the next sync. 

If i keep the original .csv file and upload it again in the future will it update if the device name is the same?

• No, Uploading a new CSV would also re-add those devices. If you need to update a device, I would suggest we first delete the older assets so you can upload that singular device with a new CSV.

Who should be the device owner?

• The device owner is the person ultimately responsible for the security of the device. For example, the person who the device would be returned to upon employee termination. 

Who should be the device user?

• This is the individual currently using the device.

How do I sort my asset resources by specific tags?

You can filter your asset resources using the Cloud tags filter to quickly locate items with specific tag criteria. Here's what each filter option means:

• Contains – Returns all assets that include the specified text within their tags.

• Does not contain – Excludes assets that have tags with the specified text.

• Is exactly – Shows only assets whose tag exactly matches the value you enter.

• Is not exactly – Shows all assets except those with a tag that exactly matches your input.

• Is empty – Finds assets that do not have any tags applied.

• Is not empty – Finds all assets that have at least one tag applied.

How can I undo or correct an incorrect assignment of an owner to assets in the asset inventory?

• If you’ve incorrectly assigned an owner to an asset (such as a repository, computer, or cloud resource), you can easily correct it using the three-dot menu next to the asset, then choose "Assign Owner."