Scribd Logo
Upload

Welcome to Scribd!

  • Isc2 Cissp 2 2 1 Establish Information and Asset Handling Requirements

    Uploaded by

    trojanbaya
    7 views1 page
    The document provides guidance on establishing information and asset handling requirements for an information security professional. It recommends encrypting media to ensure confidentiality, labeling all media to identify sensitivity, documenting and communicating all handling policies and procedures and training personnel. It also recommends encrypting stored information, clearly defining retention periods and destruction processes, conducting a data inventory, defining security policies, securing data and enforcing policies, and auditing data and policies.

    Original Description:

    Original Title

    isc2-cissp-2-2-1-establish-information-and-asset-handling-requirements

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document provides guidance on establishing information and asset handling requirements for an information security professional. It recommends encrypting media to ensure confidentiality, labeling all media to identify sensitivity, documenting and communicating all handling policies and procedures and training personnel. It also recommends encrypting stored information, clearly defining retention periods and destruction processes, conducting a data inventory, defining security policies, securing data and enforcing policies, and auditing data and policies.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    7 views1 page

    Isc2 Cissp 2 2 1 Establish Information and Asset Handling Requirements

    Uploaded by

    trojanbaya
    The document provides guidance on establishing information and asset handling requirements for an information security professional. It recommends encrypting media to ensure confidentiality, labeling all media to identify sensitivity, documenting and communicating all handling policies and procedures and training personnel. It also recommends encrypting stored information, clearly defining retention periods and destruction processes, conducting a data inventory, defining security policies, securing data and enforcing policies, and auditing data and policies.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as pdf or txt
    of 1

    Establish information and asset handling requirements

    Objectives:

    At the end of this episode, I will be able to:

    Understand and apply the recommended guidance to establish information and asset
    handling requirements through your daily practice as an information security
    professional.

    External Resources:

    Establish information and asset handling requirements

    https://www.centos.org/docs/5/html/Deployment_Guide-en-US/sec-mls-ov.html

    Media - MUST encrypt to ensure Confidentiality | Need Physical & Technical / Logical & Administrative Controls

    Marking - ALL media should be labeled to identify sensitivity of information stored

    Handling - Document ALL policies and procedures | Communicate broadly and Train all personnel

    Storing - Encrypt

    Destruction - Destruction vs. Disposal

    Retention Periods - Clearly defined & documented | ONLY keep data for as long
    as retention period | Different data = different retention periods

    1. Data Inventory -

    Scan | Classify | Label | Report

    2. Securing Data -

    Define Policies | Secure Data | Enforce Policies | Track & React

    3. Audit -

    Report on Data | Audit | Redefine Policies

    You might also like