Hacker News new | ask | show | jobs
by Daviey 1082 days ago
Visually, it looks GREAT. Thanks for sharing this. I do care more about the feature set than the UI tho', so I have some questions.

AM to me is the foundational part of any security management. I care about 3 main things:

  1) API support (for custom tooling)
  2) Integration with other tools (Jira, Salesforce, etc)
  3) Relationships/Dependencies with other assets (to determine the blast radius if there is an incident, or if this asset can be deco'd and what the impact would be)
Assets are more than just devices, are these catered for?

The feature set looks like it steps into EDM, which is a totally different problem space to AM IMO.
1 comments
canadianfella 1082 days ago
> Assets are more than just devices, are these catered for?

What does that mean?

link
Daviey 1081 days ago
Each organisation has a different interpretation, with some being as broad as anything which has an owner and would have an impact to the business if confidentiality, integrity or availability of the asset is affected.

However, the best definitions typically come from NIST which, as a non-US resident, I still recognise are leaders in this space.

https://csrc.nist.gov/glossary/term/asset

link