A little over a year ago, in December 2024, ITS Information Assurance (IA) published Endpoint Security Administration (DS-23) – an IT standard that establishes foundational security measures for university-owned systems. The FY26 Internal Controls IA Certification Question focuses on one of these measures: maintenance of an up-to-date inventory of university-owned systems.
Units are asked if they have established and maintain an up-to-date inventory of university-owned systems:
- Yes. My unit has established and maintains an up-to-date inventory of university-owned systems in my unit.
- Partially. My unit is in the process of establishing an inventory of university-owned systems in my unit, and has plans for keeping it up to date.
- No. My unit has not established an inventory of university-owned systems in my unit.
All units should be able to reply "Yes" or "Partially."
While the university does not provide an enterprise inventory management solution, it offers systems with IT asset management capabilities, such as TeamDynamix. Units can select the solution of their choice to use to establish and maintain an inventory of university-owned systems in their unit, and IA staff are available to provide guidance.
Security Unit Liaisons can submit questions related to the FY26 Internal Controls IA Certification Question through the ITS Service Center.