Information Security Handbook

Finding information in the environment

Now that we have identified the information types within our organization we need to understand where this information resides within the information system. You may find that your business users might not be able to help as much now that we are starting to look for the information within the IT environment. However, your business users should be able to point you in the right direction. Ask them who they work with in the IT organization when using their services. Ask them how they access their information and what the path is to that location. From a business user perspective, you may quickly find this is all they can give you. On a positive note, your business users should be able to provide this level ...