Software Asset & Configuration Register

Version: 1.2 Last Updated: January 2026 Owner: CTO

1. Asset Management Process

CheckTick tracks software assets through a "Managed Repository" model:

• Discovery: All new software or libraries must be approved by the CTO before being added to pyproject.toml or package.json.
• Version Tracking: Automated via GitHub Dependency Graph.
• Audit: A manual reconciliation of this register is performed quarterly to ensure decommissioned tools are removed.

2. Core Software Inventory (Production)

3. Infrastructure & Tooling

4. Configuration Baseline

All assets are configured according to the 'CheckTick Hardening Standard':

• Root accounts protected by MFA.
• Non-essential ports/services disabled by default.
• Production data encrypted at rest (AES-256) and in transit (TLS 1.2+).