Security Operations 4.2

Question 1

Assignment/accounting

Answer 1

• A central asset tracking system. Associate a person with an asset. Useful for a tracking a system.

Classification
Type of asset/Hardware (Capital Expenditure)
Software (Operating expenditure).

Question 2

Monitoring/Asset tracking.

Answer 2

Inventory Every asset, Laptops, Desktops.

Question 3

Media Sanitization

Answer 3

During system disposal or decommissioning we may need to completely remove data so no usable information remains.

Question 3

Asset Tag

Answer 3

Barcode, RFID , visible tracking number, organisation name.

Question 4

Physical Destruction

Answer 4

Using a shredder or industrial pulveriser to completely destroy the device to avoid a security breach.

Can be done with a drill and a hammer.
Electromagnetic - Remove the magnetic field. Destroys hard drive data and renders the hard drive unusable.

Organisations may incinerate a device.

Question 5

Certification of destruction

Answer 5

The third party may get involved and destroy drives and then provide a certificate of destruction.

Question 6

Data retention

Answer 6

Backup your data.
How much data and where?

Regulatory compliance