This CISSP domain includes the protection of assets.

Services that are placed in this domain are related to the following subjects:

  • Information and asset classification
  • Ownership (e.g. data owners, system owners)
  • Protect privacy
  • Appropriate retention
  • Data security controls
  • Handling requirements (e.g. markings, labels, storage)