Equipment moves constantly in construction and energy services. Laptops travel between office and trailer, tablets go to crews, routers get shipped to new jobs and phones disappear into trucks. At the end of a busy season, many companies cannot say how many devices they own, who holds them or whether they are secure.
Asset management is unglamorous, but it underpins nearly every security control. If a device is not in your inventory, it is not patched, monitored or wiped when lost.
Why inventory matters
- Patching and protection: unmanaged devices miss updates and security tools.
- Loss response: if you do not know what a lost device contained, you cannot respond properly.
- Offboarding: equipment must be recovered from departing employees.
- Cost control: you pay for licenses, plans and insurance on devices you may no longer use.
- Compliance: frameworks such as NIST SP 800-171 expect an inventory of systems that handle sensitive data.
- Insurance: applications often ask about device management and encryption.
What to track
For each device, record:
- A unique identifier: asset tag number and serial number
- Type, make and model
- Assigned user or location, such as a specific jobsite or trailer
- Purchase date and warranty status
- Operating system and software version
- Whether it is encrypted and enrolled in device management
- Associated services, such as cellular plans, SIM numbers or satellite accounts
- The data it may hold, such as CUI or financial information
- Condition and expected end of life
Do not forget non-computer devices, including rugged routers, cameras, GPS units, handheld scanners and any equipment that connects to your network.
Choose a simple system
You do not need expensive software to start. Options include:
- A spreadsheet maintained by one owner, suitable for very small fleets
- Features in your device management platform, which can discover and report on enrolled devices automatically
- A dedicated asset management tool, useful as numbers and complexity grow
Whatever you choose, assign one person to maintain it and make updates part of normal workflows.
Build the lifecycle
Procure
Buy through a standard process so every device is recorded from the start. Apply asset tags on arrival.
Provision
Set up devices with standard configurations: encryption, updates, security software and management enrollment. Record the user and date.
Assign and move
When a device changes hands or locations, update the record. For jobsite equipment, a check-out and check-in log helps. Include a simple form or scan code to simplify the step.
Maintain
Review devices periodically for missing updates, failed encryption or devices that have not checked in recently. Devices that vanish from management tools are the first to investigate.
Retire
When a device reaches end of life, wipe it securely, remove it from accounts and plans, and record the disposal. Devices that hold sensitive data may need documented destruction or certified wiping, especially under contract requirements.
Run regular checks
- Monthly: compare your inventory against what your management tools see.
- Quarterly: physically verify high-value or high-risk devices, particularly those at jobsites.
- At closeout: reclaim project equipment and reset it before storage or reassignment.
- At offboarding: confirm that every assigned device has returned.
Handle lost and stolen devices
Have a written procedure that employees can follow quickly:
- Report to IT or your managed provider immediately
- Remotely lock or wipe the device, when management tools allow
- Disable associated accounts and revoke sessions
- Suspend cellular service if relevant
- Record the incident, including what data was on the device
- Decide whether notification obligations apply, with advice from counsel when needed
Address personal devices
If employees use personal phones or tablets for work, decide what is permitted. Consider requiring enrollment in a lightweight management profile that protects company data, such as separating work apps from personal content, and set clear rules on what data may be stored.
A hypothetical example
Consider a hypothetical contractor with 150 devices, tracked loosely on a spreadsheet nobody updates. After a trailer break-in, nobody can say which laptops were stolen, whether they were encrypted or what they contained. A simple asset record tied to device management would have answered those questions within minutes and shortened the response.
First steps
Start by listing devices that touch company data today, even if the list is imperfect. Then tag, enroll and assign. Ironfield Cyber helps contractors and energy companies build practical asset inventories, connect them to device management and set processes that field teams can follow. If your equipment list lives in someone's head, we can help you put it in a system.