1. What is the purpose of identifying IT assets and inventory?
a. amount of your assets that are ties up in inventory, Inventory/Assets x 100 ... The purpose of the present research project was to gain a holistic understanding
2. What is the purpose of an asset classification?
a. Asset classifications identify and characterize similar assets, gathering them into groups, and making the assets easier to find.
3. For the scenario you picked, give three (3) examples of customer privacy data elements.
4. Why is your organization’s website classification minor but its e-commerce server considered critical for your scenario?
a. Because there is customer’s credit card information stored on the servers
5. Why would you classify customer privacy data and intellectual property assets as critical?
a. These are things that can be damaging to not just an organization but to individuals as well.
6. What are some examples of security controls for recent compliance law requirements?
a. Biometrics, Tokens, Smart cards
7. How can a Data Classification Standard help with asset classification?
a. You can properly classify what might normally be a low priority a high risk classification because of the data that’s on it.
8. How can you minimize leakage of customer privacy data through the public Internet?
a. One way is to encrypt the sensitive data with at least 256 bit encryption key. Another way is to label whatever the sent information is as something not out of the ordinary
9. Given the importance of the Master SQL database that houses customer privacy data and intellectual property assets, what security controls and security countermeasures can you apply to help protect these assets?
a. First setup securities policies and software to prevent SQL injection so the database can’t be compromised. Then have a schedule policy to keep the database to only be online when in