Asset Classification, Handling, and Provisioning

Introduction

This lesson opens Domain 2, Asset Security (10% of the exam, ISC2 exam outline effective 15 April 2024). Domain 1 taught you to think in terms of risk; Domain 2 begins with a simple question that every risk decision depends on: what do we have, how valuable is it, and who is responsible for it? You cannot protect what you have not identified, and you cannot spend money sensibly on controls without knowing which assets deserve the most protection.