Exam Objective 4.2
The following objective breakdown is provided to explain the security implications of proper hardware, software, and data asset management:
- Acquisition/procurement process: Purchasing of new equipment
- Assignment/accounting:
- Ownership: Establishing clear ownership of assets
- Classification: Categorizing assets for security management
- Monitoring/asset tracking:
- Inventory: An up-to-date record of assets
- Enumeration: Identifying and tracking all assets
- Disposal/decommissioning:
- Sanitization: Safely wiping data from retired assets
- Destruction: Properly disposing of obsolete assets
- Certification: Verifying secure asset disposal
- Data retention: Managing data storage for compliance