Information asset classification table

Classification generally describes data recorded by data assets in a physical or electronic way, such as documents and electronic data.

Documents include official documents, contracts, operating instructions, project documents, records, faxes, financial reports, development plans, emergency plans, daily data generated by the undergraduate course, and various foreign inflow documents.

Electronic data such as system files, management methods, system files, technical schemes and reports, work records, tables, configuration files, topology diagrams, system information tables, user manuals, database data, operation and statistical data, and source codes in the development process. All kinds of software installed and used in software asset information processing facilities (servers, desktops, laptops, storage devices, etc.). ) is used to process, store or transmit all kinds of information, including system software, application software (software system with background database and storing application data), tool software (software tool supporting specific work), desktop software (desktop software package needed for daily office) and so on. For example: operating system, database application program, network software, office application system, business system program, software development tool, etc. Physical assets are all kinds of IT physical equipment or hardware facilities related to business, which are used to install identified software, store identified data assets or support departmental business. Include host devices, storage devices, network devices, security devices, computer peripherals, removable devices, removable storage media, wiring systems, etc. Personnel assets are all kinds of personnel roles that use, operate and support the identified data assets, software assets and physical assets (that is, support business). Such as managers, business operators, technical support personnel, developers, operation and maintenance personnel, security personnel, ordinary users, outsourcing personnel, security guards with contract constraints, cleaners, etc. Service assets: various services that can support the operation of other identified assets (that is, support business) obtained through purchase or provided by the support department. Such as product technical support, operation and maintenance services, desktop help services, internal basic services, network access services, security (such as monitoring, access control, security, etc. ), call center, monitoring, consulting and auditing, infrastructure services (water supply, heating and power supply). Other assets: other intangible assets that support the business except the identified information assets. Such as the effectiveness of ISMS system, the conformity of standards, and the compliance with customer requirements.