Managing Risk in Information Systems, 3rd Edition

Data and Information Assets

Another important asset to consider is data and information held by the company. The value of data can’t be overstated. An organization’s losing data can have a tragic result.

Data is protected in two ways:

• Access controls—Access controls protect data from unauthorized disclosure and help protect the confidentiality of data.
• Backups—Backups protect data when it becomes corrupted or accidentally deleted. At least two copies of backups should exist. One copy is kept locally, and another copy is kept in a separate geographic location. The second copy protects against disasters, such as fire or flood. Keeping the only backup of the data with the server means that, if the server room burns in a fire, there will be ...