Asset Documentation
A hardware estate and network topology diagram that matches reality.
What leaving hardware and infrastructure alone costs you
Without documented hardware and infrastructure management, a buyer assumes undocumented, inconsistent network configuration, ageing or unsupported equipment as a security gap, no clear record of what's connected to the network, risk in how old devices and data are disposed of and infrastructure claims in certifications that don't match reality.
None of that may be true of you. It does not matter. In an audit, the assumption is what gets tested.
The hardware and infrastructure point most manufacturers miss
Most manufacturers can describe their IT setup from memory. Almost none can produce an asset register that matches it, and that is exactly what an auditor asks to see.
Hardware is not a procurement decision. For tender purposes, it's documented evidence behind everything else you claim.
What hardware and infrastructure support covers
Secure Configuration
Firewalls, switches and access points configured to Cyber Essentials standards.
Lifecycle Management
Replacement planning and certified data destruction for end-of-life devices.
Physical Security
Server room security and power resilience for critical infrastructure.
What hardware and infrastructure look like inside a manufacturer
- A current hardware and network topology diagram exists.
- Firewalls and access points are configured to a documented, certified standard.
- Devices are supplied and configured consistently, not ad hoc.
- An asset register tracks every piece of hardware through its lifecycle.
- End-of-life devices are disposed of with certified data destruction.
- Power and environmental resilience protects critical systems.
- Hardware configuration matches what's declared in Cyber Essentials submissions.
How hardware and infrastructure affect your tender score
| Tender criterion | What this service contributes | Score effect |
|---|---|---|
| Compliance | Underpins Cyber Essentials secure configuration evidence | Moderate |
| Risk | Poor asset management reads as operational risk | Moderate |
| Quality | Documented asset register supports process maturity | Moderate |
| Operational Resilience | Reliable infrastructure supports uninterrupted delivery | Moderate |
| Cyber | Physical layer behind every cyber control claim | Minor |