Tuesday, June 18, 2019

Asset Classification Policies and Procedures Essay

Asset Classification Policies and Procedures - Essay ExampleAsset Classification Policies and ProceduresFor information to be handled properly, employees are take to have a working knowledge of the categorization of information into the three provided categories. Employees should be able to categorize the information before forwarding it further. If at some(a) point, employees are confused about properly categorizing the information, the proper course of action is to classify it as confidential while an appropriate supervisor would later critique and properly classify.Public Data- As the name suggests, much(prenominal) data is usually open to the public and is easily available. Disclosure of such data does not install the firm in any kind of risk however certain controls are required to be enforced on such data to nix modification or destruction of the data by unauthorized partiesSensitive Data- Data is classified as sensitive data when disclosures of such information publicly c an result in potential risk for the organization or its people. Such information may be provided to others on a discretionary foothold and under the supervision of the data owner.Confidential Data Confidential data is the most sensitive data within the organization and unauthorized disclosure of such information can result in significant risk for the firm. The highest level of security and control are applied on such information.The System tinct level will determine the impact of activities on the system on a scale of one to five with five being the most essential impact and one having the least crucial impact.

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.