Scribd
Upload
8 views4 pages

Chapter - 5 Note

Uploaded by

PAING LIN HTIKE
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
8 views4 pages

Chapter - 5 Note

Uploaded by

PAING LIN HTIKE
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 4

I’ll explain the content of each slide in simpler language, along with key

points in note form. Let me summarize each section for you.

Slide 1: Course Outline

Explanation: This chapter focuses on understanding what assets are, the


different types of assets, how to identify important ones for an organization,
and how to take responsibility for them.

Key Points:

 Learn what assets are.

 Different types of assets.

 How to identify important assets.

 Responsibility and ownership of assets.

Slide 2: Assets Overview

Explanation: Assets are things an organization values and protects.


Different organizations may see value in different things.

Key Points:

 Assets = Valuable resources or information.

 Two types of assets: General (common to all) and Idiosyncratic


(unique to a specific organization).

Slide 3: Determining Important Assets

Explanation: To find key assets, organizations use two approaches:

1. Bottom-Up: Employees share their knowledge about day-to-day


operations.

2. Top-Down: Leaders understand the organization's big goals (e.g., by


reading mission and vision statements).

Key Points:

 Two approaches: Bottom-Up and Top-Down.


 Bottom-Up = Workers' experience.

 Top-Down = Leaders' perspective from goals and reports.

Slide 4: Important Asset Types

Explanation: Once an organization identifies its key areas, it can focus on


specific types of assets, such as:

1. Information (e.g., data and files).

2. Personnel (e.g., employees).

3. Hardware (e.g., machines).

4. Software (e.g., programs).

5. Legal (e.g., contracts).

Key Points:

 Five key asset types: Information, Personnel, Hardware, Software, and


Legal.

Slide 5: Information Assets

Explanation: Information assets are digital data stored locally or online.


These are usually the most valuable and are often targeted by attackers.

Key Points:

 Examples: Payroll data, intellectual property.

 Prime target for hackers.

Slide 6: Personnel Assets

Explanation: Employees are important, especially those with unique skills.


Organizations may need to offer incentives to retain skilled workers.

Key Points:

 Skilled employees = Hard to replace.

 Consider cross-training and retention strategies.


Slide 7: Hardware Assets

Explanation: Hardware includes machines used to store or process


information. They can be general-purpose or unique to an organization.

Key Points:

 Examples: General-purpose computers or unique prototypes.

 Use contracts like NDAs to protect unique assets.

Slide 8: Software Assets

Explanation: Software helps organizations achieve their goals. Like


hardware, it can be common or customized.

Key Points:

 Examples: General software like Microsoft Office or custom-built


programs.

 Protect software with proper licenses.

Slide 9: Legal Assets

Explanation: Legal assets are agreements (like contracts) that affect how
other assets are used. These are sometimes overlooked until problems arise.

Key Points:

 Examples: Software licenses, technical support agreements.

 Ensure contracts are up to date.

Slide 10: Asset Characterization

Explanation: Assets can be evaluated based on their Sensitivity


(importance to security) and Criticality (importance to survival).

Key Points:

 Sensitivity = How much damage a breach would cause.


 Criticality = How vital the asset is to operations.

Slide 11: Individual vs. Operational Responsibility

Explanation: Responsibility for assets can belong to individuals (e.g.,


managing a home network) or operational teams (e.g., managing a
company's systems).

Key Points:

 Individual responsibility = Your home network.

 Operational responsibility = Organization’s systems.

Slide 12: Asset Ownership

Explanation: The owner of an asset is responsible for its security and


unexpected risks, even if they didn’t pay for it.

Key Points:

 Ownership = Responsibility for securing and managing risks.

Would you like me to expand on any specific slide or topic?

You might also like