This slide captures in a nutshell the various issues that are to be discussed in the session
The objectives of asset classification and control are
Accountability for assets: to maintain appropriate protection of organisational assets and
Information classification: to ensure that information assets receive an appropriate level of protection. This would involve the following:
– Prescribing classification guidelines taking into account business needs for sharing or restricting information and the business impacts associated with such needs
– Defining and following a set of procedures for information labelling and handling in accordance with classification scheme adopted by the organisation.