Skip to content

Device checks

A hardware asset in Information assets has a Device section on its page. Other asset types do not. The section shows when the device was last checked, with a link to the evidence from that check.

Owners and admins can edit it. Every other role, auditors included, sees the values read-only.

Field What you enter
Serial number Free text
OS and OS version Free text, for example macOS and its version
Disk encryption Yes, No, or Not recorded
Firewall Yes, No, or Not recorded
OS auto-update Yes, No, or Not recorded
Malware protection Yes, No, or Not recorded
Screen lock (minutes) A whole number from 0 to 1440, or blank
Assigned to A person from your People list, or Nobody

Save device details stores the fields and files no evidence.

Record device check saves the same fields, stamps today as the last check, and files an attestation in Evidence titled Device check: <asset name>. The evidence states the date, who recorded the check, the assigned person, the serial number and OS, and each setting as yes, no or not recorded.

Keel links the evidence to these controls when your workspace has them:

  • Workstation & endpoint security and Asset inventory, on every check.
  • Malware protection, when the check records a Yes or No for malware protection.
  • Encryption in transit & at rest, when the check records a Yes or No for disk encryption.

A control the workspace does not have is skipped. Run a check each time you review a device, so the evidence shows its state over time.