Instructions: Answer all questions in a single document. Then submit to the appropriate assignment folder. Each response to a single essay question should be about a half-page in length (about 150 words).
1. Not all information has the same importance and value to a company. How data is classified is an important factor used in determining the amounts of funding and resources that should be applied to protecting each type of data. Describe the data classification levels within commercial and military organizations and provide examples of the types of information that would be classified at each classification level.
2. It takes a team of individuals throughout the organization working together to safeguard the integrity and confidentiality of data resources. Describe the layers of responsibility within an organization when it comes to asset security and data protection. For each role, discuss their responsibility within the organization for asset security.
3. The architecture of a computer system is very important and comprises many topics. The system must ensure that memory is properly segregated and protected, ensure that only authorized subjects access objects, ensure that untrusted processes cannot perform activities that would put other processes at risk, control the flow of information, and define a domain of resources for each subject. It also must ensure that if the computer experiences any type of disruption, it will not result in an insecure state. Many of these issues are dealt with in the system’s security policy, and the security mode is built to support the requirements of this policy. Explain the concept of a trusted computing base and describe how it is used to enforce the system’s security policy. Provide examples of specific elements (hardware, software or firmware) in the architecture of the computer system could be used that provide security within the TCB.
Explanation & Answer
Running head: ASSET SECURITY AND DATA PROTECTION
Asset Security and Data Protection
ASSET SECURITY AND DATA PROTECTION
Q. Data classification levels within commercial and military organizations
Data classification within commercial organizations does not follow a specific standard
whereby the classification standards rely on the responsiveness of the data and the desired levels
of classification. The commercial classification of data from the lowest to the highest level is
sensitive, confidential, private, proprietary, and public (Peppard and Ward, 2016). The sensitive
data is that which has the highest degree of integrity and the most limited access since it can
cause the most damage if disclosed. The confidential data is less restrictive but it can still cause
damage when disclosed. The private data comprises the compartmental data such as human
resource data which cannot damage the company but maintained as private for other reasons.
The proprietary data contains information on the competitive advantage of the organizatio...