We are tracking remediations that are required on a few websites owned by various teams within our company as part of our Security Scorecard metric. Presently, we don’t have a great way to track our Domains and Subdomains back to the Application Owners or Service Owners. It is a manual effort each time to identify the appropriate points of contact. We need to determine how best to track these via the CMDB given that we don’t have automated discovery at this time of Domains. I am curious what Class structure to use for websites and internally and externally hosted domains...
Key information to track:
- Domain (ie: my-company.com)
- Subdomain (ie : services.my-company-dc.com)
- Domain Owner (Service Owner ?)
- Subdomain Owner (Application Owner ?)
- Service Description
- Change Owner (either internal contact such as Service/App Owner, or Vendor depending on contract)
- Vendor Name
- Vendor Contact
