How to classify classified assets in information security level security engineering?
The classification of classified assets is very important in the information security classification project. It is the premise of determining the classification and confidentiality, and also the core of the classification. The classified management of classified assets mainly follows the following principles. First of all, according to the classification category, value and importance of assets, determine the level of classified assets and list the assets. Second, according to the nature of assets, business scope, classification, contact scope, importance and the size of losses caused by leakage, determine the confidentiality level and related protection measures. Third, clarify the person responsible for asset protection and regularly review the value of assets. Fourth, assets should include classified personnel, classified places, secret vector, classified information materials, classified information systems, classified equipment and classified documents. Fifth, not only the classified objects should be graded, but also the classified personnel, and the grading should include people and things.