Guest user Created: Jan 12, 2016 Last commented: Jan 12, 2016

Responsibility for classifying the assets

I have a question about asset inventory, who is the responsible to establish and to assign the propietario of an asset? And, In my company, the assets/information classification is:

0 0

Assign topic to the user

Select user

Guest

DejanK Jan 12, 2016

- PUBLIC
- PRIVATE
- SENSIBLE
- CONFIDENTIAL
the question is, who is the responsible to give this classification to the assets??

Answer: ISO 27001 standard does not prescribe the responsibility for asset classification, but the best practice is that asset owners classify their assets. This is because they are in the best position to assess how confidential or how sensitive each of their assets are.

The asset inventory itself can be compiled by Information security manager, or some other person who coordinates information security in your company.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Jan 12, 2016

Expert Advice Community