Device checks
A hardware asset in Information assets has a Device section on its page. Other asset types do not. The section shows when the device was last checked, with a link to the evidence from that check.
Owners and admins can edit it. Every other role, auditors included, sees the values read-only.
Device fields
Section titled “Device fields”| Field | What you enter |
|---|---|
| Serial number | Free text |
| OS and OS version | Free text, for example macOS and its version |
| Disk encryption | Yes, No, or Not recorded |
| Firewall | Yes, No, or Not recorded |
| OS auto-update | Yes, No, or Not recorded |
| Malware protection | Yes, No, or Not recorded |
| Screen lock (minutes) | A whole number from 0 to 1440, or blank |
| Assigned to | A person from your People list, or Nobody |
Save device details stores the fields and files no evidence.
Record device check
Section titled “Record device check”Record device check saves the same fields, stamps today as the last check, and files an
attestation in Evidence titled Device check: <asset name>. The evidence states
the date, who recorded the check, the assigned person, the serial number and OS, and each setting
as yes, no or not recorded.
Keel links the evidence to these controls when your workspace has them:
- Workstation & endpoint security and Asset inventory, on every check.
- Malware protection, when the check records a Yes or No for malware protection.
- Encryption in transit & at rest, when the check records a Yes or No for disk encryption.
A control the workspace does not have is skipped. Run a check each time you review a device, so the evidence shows its state over time.
Next steps
Section titled “Next steps”- Supporting registers: the information asset register itself.
- Onboarding and dates: the joiner checklist that asks for devices to be inventoried.
- Automated checks: evidence Keel collects without a form.