5. Protection of Information Assets – Why CISA

icon-calendar Date: May 14, 2021

Share on

Evaluate the organization’s information security and privacy policies and practices.
Evaluate physical and environmental controls to determine whether information assets are adequately safeguarded.
Evaluate logical security controls to verify the confidentiality,integrity, and availability of information.
Evaluate data classification practices for alignment with the organization’s policies and applicable external requirements.
Perform technical security testing to identify potential threats and vulnerabilities.
Evaluate potential opportunities and threats associated with emerging technologies, regulations, and industry practices.