Chapter 7. Risk Mitigation Planning, Strategies, and Controls
This chapter covers the following topics:
Classify Information Types into Levels of CIA Based on Organization/Industry: This section includes a discussion of CIA, FIPS 199 levels, information classification (including commercial business and military/government classifications), and the information life cycle.
Incorporate Stakeholder Input into CIA Decisions: This section covers why stakeholder input should be obtained and factored into the decisions made.
Get CompTIA Advanced Security Practitioner (CASP) CAS-002 Cert Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
