Free Preparation Discussions
MENU
ISC2 CISSP Exam - Topic 1 Question 96 Discussion
Topic #: 1
Who has the PRIMARY responsibility to ensure that security objectives are aligned with organization goals?
Information assets are any data or information that have value for the organization, such as financial records, customer data, intellectual property, or trade secrets. Information assets are essential for the organization to achieve its objectives and to maintain its competitive advantage. Information assets should be identified, classified, and protected according to their value, sensitivity, and criticality. International Organization for Standardization (ISO) 27001 compliance does not specify which information assets must be included in asset inventory, but rather provides a framework and a set of requirements for establishing, implementing, maintaining, and improving an information security management system (ISMS). Building an information assets register is not necessarily a resource-intensive job, but rather a necessary and beneficial one, as it helps to document and manage the information assets of the organization, and to support the risk assessment and security planning processes. Information assets inventory is required for risk assessment, as it helps to determine the scope, impact, and likelihood of the risks that may affect the information assets, and to prioritize and implement the appropriate controls and measures to mitigate the risks.
Susy
4 months agoLorrie
5 months agoNohemi
5 months agoAliza
5 months agoKaycee
5 months agoAbel
5 months agoAdria
6 months agoAlona
6 months agoNarcisa
6 months agoDaron
6 months agoEvangelina
6 months agoRodolfo
6 months agoLezlie
6 months agoSharmaine
12 months agoMelina
11 months agoShannan
11 months agoGlendora
11 months agoMariann
11 months agoStevie
12 months agoDyan
12 months agoKimi
11 months agoFatima
11 months agoGilma
12 months agoLigia
12 months agoHerminia
1 year agoJustine
1 year agoNelida
1 year ago