Domain#2 - Asset Security

Domain#2 - Asset Security

1. Classification Process

   • Asset inventory
   • Determine and Assign Owner
   • Classify based on value
   • Protect and Handle based of classification

2. Asset Lifecycle

   • Create
   • Store
   • Use
   • Share
   • Archive
   • Destroy
     • Identify and Classify
     • Secure
     • Monitor
     • Recover
     • Disposition
     • Archive
     • Defensible Destruction

3. Asset Protection and Classification

   • Data Subject
   • Data Owner
   • Data Controller
   • Data Steward
   • Data Procesor
   • Data Custodian

4. OECD Privacy

   • 1# Collection Limitation
   • 2# Data Quality
   • 3# Purpose Specification
   • 4# Use Limitation
   • 5# Security Safeguards
   • 6# Openess
   • 7# Individual Participation
   • 8# Acountability