This activity is designed to classify an organization’s information assets based on the nature of the information and the type of protection required in terms of confidentiality, integrity and availability (CIA).
This classification will serve as the main input throughout the other steps involved in the preparation of the organization’s security program. It will notably contribute to identify major risks and to prepare business continuity plans.
|