3.10.1. Asset Management and Lifecycle
💡 First Principle: Every piece of hardware in your environment is an asset with a lifecycle: purchased, deployed, maintained, and eventually retired. Asset management tracks this lifecycle to prevent paying for unused equipment, losing track of physical hardware, or missing warranty coverage on failed components.
Asset Tracking Information
Every tracked asset should include:
| Field | Purpose |
|---|---|
| Make/Model | Identify the hardware |
| Serial number | Unique hardware identifier for warranty and support |
| Asset tag | Organization's internal identifier (often a barcode label) |
| Physical location | Data center, rack, rack unit |
| Assigned user/department | Who is accountable |
| Warranty information | Expiration date, support level |
Lifecycle Phases
- Procurement: Purchasing new assets. Includes HCL verification, capacity planning, licensing acquisition.
- Usage: Active operational life. Includes maintenance, monitoring, and configuration management.
- End of life: When a device is no longer cost-effective or supported. Triggered by age, vendor EOL announcement, or hardware failure.
- Disposal/Recycling: Secure removal. Requires media sanitization (see Phase 4) and environmentally responsible disposal.
Leased vs. Owned Devices
| Aspect | Owned | Leased |
|---|---|---|
| Capital vs. operating expense | Capital (upfront cost) | Operating (monthly/annual) |
| Disposal responsibility | Organization | Lessor (return at end of term) |
| Flexibility | Keep as long as needed | Forced refresh on schedule |
| End-of-life handling | Organization's responsibility to sanitize and dispose | Must sanitize before returning |
⚠️ Exam Trap: Leased devices must still be sanitized (data wiped) before returning to the lessor. The organization is responsible for data security regardless of who owns the hardware. Returning a leased server without wiping it is a data breach.
Reflection Question: An organization receives a notice that a server under warranty has failed. Support requests the serial number to dispatch a replacement part. Where should this information be found immediately, and what does it mean if it can't be found?
