Developing Cybersecurity Programs and Policies, 3rd Edition

Chapter 5

Asset Management and Data Loss Prevention

Chapter Objectives

After reading this chapter and completing the exercises, you will be able to do the following:

• Assign information ownership responsibilities.

• Develop and use information classification guidelines.

• Understand information handling and labeling procedures.

• Identify and inventory information systems.

• Create and implement asset classification policies.

• Understand data loss prevention technologies.

Is it possible to properly protect information if we do not know how much it is worth and how sensitive it is? Until we classify the information, how do we know the level of protection required? Unless we determine the value to the organization, how can we decide the amount of time, ...