How does asset classification support cybersecurity risk management?
- A.Classifying assets based on their purchase date and warranty status enables scheduled replacement, ensuring the oldest assets receive priority for procurement funding across each department and business unit
- B.Classifying assets based on their criticality and sensitivity enables prioritized protection, ensuring the most important assets receive appropriate levels of cybersecurity investment
- C.Classifying assets based on their physical location and floor plan enables scheduled maintenance, ensuring the busiest facilities receive priority for janitorial staffing across each building and campus
- D.Classifying assets based on their manufacturer and model number enables simplified support tickets, ensuring the newest assets receive priority for vendor warranty claims
Why B is correct
Asset classification assigns importance levels based on business impact, enabling organizations to allocate limited cybersecurity resources to protect the most critical and sensitive assets first.
Know someone studying for NIST CSF? Send them this one.