Information Security Handbook

Determining information assets

Determining what the organization's information assets are can be a pretty complicated activity. Often, when an organization wants to understand their information they go to IT looking for the answer. However, in this case, we need to work with the organization's business groups. The information technology group typically does not know the context behind the data they are storing. They are worried about storage volume size and read/write speed. It is the business units that can provide context behind what the data actually means and why it is important to their business function.

Sample questions to ask when determining your organization's information assets:

• Does your organization process transactional information ...