The hardware inventory should be comprehensive. In addition to identifying institution-owned assets, it should also identify equipment owned by other parties but located within the environment. To the extent possible, hardware items should be marked with a unique identifier, such as a bar code, tamper-proof tag, or other label. The inventory should encompass stand-alone computing devices, including:

  • Environmental control terminals;
  • Physical access control systems;
  • Service-provider-owned equipment, such as automated teller machine (ATM) administrative terminals;
  • FedWire/Fedline terminals;
  • Bank customer-owned equipment;
  • Vendor-owned equipment;
  • Personal computers (PCs);
  • Mainframes; and
  • Servers.

The following are examples of useful information to capture in hardware inventories:

  • Mainframe, midrange or server:
    • Vendor and model;
    • Processor capacity in million instructions per second (MIPS);
    • Core or main memory;
    • Storage (internal and external tapes, tape silos, direct access storage device (DASD), etc.);
    • Function; and
    • Location.
  • Desktop or stand-alone computing devices:
    • Vendor and model;
    • Owner and purpose;
    • Network connectivity (not applicable to stand-alone);
    • Dial-out capability; and
    • Location.
  • Network devices: 
    • Vendor and model;
    • Type;
    • Native storage (random access memory); and
    • Internet protocol (IP) address.
  • Item processing equipment:
    • Vendor and model; and
    • Type.

Inventories of telecommunication equipment should contain similar information and should document use and connectivity. This is especially important when an institution uses either private branch exchanges (PBX) or voice over Internet protocol (VOIP) to provide voice and data connectivity. Inventories of telecommunications interconnections should include the following information:

  • Number and configuration of trunks;
  • Circuit numbers;
  • Entry points to the premises;
  • Central office connectivity;
  • Types of service supplied, including:
    • POTS - plain old telephone service;
    • SONET - synchronous optical network;
    • ISDN - integrated services digital network;
    • Frame relay; and
    • Wireless.


Previous Section
Technology Inventory
Next Section