Establishing Information- and Asset-Handling Requirements
In order to establish information- and asset-handling requirements, the first step is to look at all the ways that you can store information and the form that assets may take. Usually, information and digital assets are intangible, but some information assets can be tangible. Some examples of physical information and assets include paper, such as printed information. Another important physical information asset is the actual storage media – for example, backup storage media, whether magnetic or optical, hard disk drives (HDDs), servers, laptops, or anything that might contain valuable information.
Another category of assets that is also physical is mobile devices. Mobile assets can contain information of interest and comprise phones and tablets. These can be either employee-owned under a bring-your-own-device (BYOD) policy or company-owned.
An additional information storage location you must consider is cloud storage...
