Free Preparation Discussions
MENU
ISC2 CISSP Exam - Topic 1 Question 96 Discussion
Topic #: 1
Who has the PRIMARY responsibility to ensure that security objectives are aligned with organization goals?
Information assets are any data or information that have value for the organization, such as financial records, customer data, intellectual property, or trade secrets. Information assets are essential for the organization to achieve its objectives and to maintain its competitive advantage. Information assets should be identified, classified, and protected according to their value, sensitivity, and criticality. International Organization for Standardization (ISO) 27001 compliance does not specify which information assets must be included in asset inventory, but rather provides a framework and a set of requirements for establishing, implementing, maintaining, and improving an information security management system (ISMS). Building an information assets register is not necessarily a resource-intensive job, but rather a necessary and beneficial one, as it helps to document and manage the information assets of the organization, and to support the risk assessment and security planning processes. Information assets inventory is required for risk assessment, as it helps to determine the scope, impact, and likelihood of the risks that may affect the information assets, and to prioritize and implement the appropriate controls and measures to mitigate the risks.
Susy
3 months agoLorrie
3 months agoNohemi
3 months agoAliza
4 months agoKaycee
4 months agoAbel
4 months agoAdria
4 months agoAlona
4 months agoNarcisa
5 months agoDaron
5 months agoEvangelina
5 months agoRodolfo
5 months agoLezlie
5 months agoSharmaine
10 months agoMelina
9 months agoShannan
10 months agoGlendora
10 months agoMariann
10 months agoStevie
10 months agoDyan
10 months agoKimi
10 months agoFatima
10 months agoGilma
10 months agoLigia
10 months agoHerminia
11 months agoJustine
11 months agoNelida
11 months ago