Information asset classification
Information asset classification means classifying assets based on their criticality to the business. An asset can be classified as confidential data, private data, or public data. This classification helps the organization provide the appropriate level of protection to the assets. More resources should be utilized to protect confidential data compared to public data.
Benefits of classification
The following are the objectives/benefits of information classification:
- Classification helps reduce the risk of assets being under-protected. Assets are protected in proportion to their criticality.
- Classification helps reduce the cost of assets being overprotected.
In the next section, we'll understand the steps involved in classification.
Understanding the steps involved in classification
CISM aspirants should understand the following steps to successfully implement an information classification program:
- The...
