Unrecorded laptops. Old routers. SaaS subscriptions bought by individual teams. I’ll guide you through the records and checks that help uncover them, then show your team how to maintain a more useful asset register.
We agree the areas to investigate, sessions, outputs and fee before you commit.
Tell me where your records are incomplete and who could help investigate. I’ll suggest a suitable scope and next steps.
Useful starting points:
• Whether you need help with SaaS subscriptions, devices, infrastructure or a combination.
• Your approximate staff numbers, locations and main platforms.
• Any existing asset records or management tools.
• Who manages your IT and who would attend the sessions.
Before you send
Please don’t include passwords, credentials, or other sensitive information in an initial enquiry. If we need to share anything sensitive, we’ll agree a secure way to do it.
Some assets can be discovered from outside your organisation. Others need information from your people, providers and internal records. This service helps your team gather that evidence, reconcile discrepancies and build a repeatable process.
Work through relevant purchasing records, supplier invoices, expense entries and identity-provider application lists to identify services that may be missing from your register. Your authorised staff review the records and share only the relevant information.
Compare device-management records, purchasing lists, network equipment records and provider inventories. Use guided checks to identify laptops, phones, routers and other equipment that needs recording or investigation.
Bring the evidence together, identify duplicates and gaps, and clarify who owns or manages each asset. Record uncertain matches and unanswered questions rather than treating assumptions as confirmed facts.
Learn how to record new assets, handle supplier and staff changes, review subscriptions and retire old systems. Agree a practical review routine and who is responsible for keeping it going.
The £699 Internet-Facing Asset Inventory includes a self-discovery guide. This separately scoped service adds guided sessions, help interpreting your records and practical training for your team. You can also book it directly without buying another Ronin service.
Discuss discovery supportStart with what you know, gather useful evidence and work through the gaps together.
Depending on scope, useful starting points may include an existing asset register, relevant supplier and subscription records, identity-provider application lists, device-management exports, cloud resource inventories and MSP equipment lists. Incomplete records are fine. We’ll identify what is useful before asking you to gather it.
Your team or provider performs internal checks and supplies authorised records. Any direct technical discovery, account access or changes to systems must be separately agreed within the scope.
I lead Ronin, an independent cybersecurity consultancy.
With over ten years in the sector, including time as a consultant at NCC Group, I work closely with small teams, leaders and their IT providers to ensure clear and practical communication.
I’ll help your team make sense of the available evidence, identify what still needs investigating and establish a process they can keep using. The aim is a useful working register with clear ownership.
Common questions about Ronin’s Guided Asset Discovery and Training.
The inventory focuses on your external footprint and includes a self-discovery guide. This service provides guided help with internal devices, SaaS subscriptions and organisational records, plus training on maintaining the register.
No. This service can be booked directly. If you already have a Ronin inventory or another asset register, we can use it as a starting point.
No discovery method can guarantee complete coverage. Results depend on the agreed scope, available records and participation from your team and providers. We document gaps and uncertainties so they can be followed up.
We agree a tailored checklist. It may include relevant supplier and subscription records, application lists, device-management exports, cloud inventories and provider records. We only need information relevant to the agreed work.
Please don’t send passwords. Your authorised staff can usually gather the relevant records or demonstrate them during a session. Any direct access must be agreed separately and limited to what the work requires.
Yes. Their knowledge and records can help establish ownership, explain discrepancies and make the ongoing process practical.
The proposal defines the outputs. These can include an updated asset register for the agreed areas, a list of unresolved gaps and actions, tailored checklists and training sessions for the people maintaining it.
Not as part of this service unless explicitly agreed. We help identify assets and questions to investigate; your organisation approves any cancellation, removal or change after checking dependencies and business needs.
No. Finding and recording an asset does not establish whether it is secure. Configuration reviews, penetration testing and remediation can be scoped separately.
The fee depends on the areas covered, the records available, the help needed and the number of sessions. We agree the scope, outputs and price before you commit, with VAT added where applicable.