cisco certification university of zimbabwe

cisco certification university of zimbabwe.owner is assigned to it at the time of acquisition or transfer. The responsibilities of an asset owner are shown below. Make a proper inventory of the assets they own. Classify the assets. Securely store assets. Periodically review the asset classification and access control system, including reviewing the access rights to the assets. Dispose of assets properly. Asset owners and unit executives are jointly responsible for assets throughout their life cycle. The asset owner may5.4.3 Acceptable systems for the receipt and return of assets The unit should make the systems related to access to and receipt of specific assets clear to each asset user. In the system, it should be clear that5.4 Asset management 256delegate the day-to-day operation of the assets to the asset custodian. The posts and responsibilities in the information security area have been discussed in detail in Chapter 4.positions and responsibilities.Clearly define the responsibilities and expected behaviour of the user. Before granting access to an asset, the unit can have the user sign to confirm that he or she has read and understood the acceptable asset access system. Users should be held accountable for any misuse of assets or violations of the unit's security system.The unit should also develop a system and process for returning assets when the user is not required to use them, for example, when the employee using them is terminated, transferred, or when their contract expires. Consideration should be given to the inclusion of physical and electronic assets in the content of the asset return system. Where users use private equipment to conduct unit operations, the system should also have provisions relating to the proper transfer of information on such equipment.5.4.4 Classifying assets should be based on the level of risk that unauthorized access to the asset poses to the unit in terms of confidentiality, integrity and availability. Asset owners will classify assets and this will affect the level of protection that the asset has. The asset classification system and process should include an asset classification scheme (e.g., naming rules for tags) and a process for changing the classification of assets when their associated values and risks change. The asset classification scheme should include labels for assets with various levels of risk. For example, assets with a "significant risk level" should be labeled "top secret". Table 5-5 shows a common asset classification scheme for military and government agencies. A more detailed discussion of asset classification is provided in Chapter 4.Table 5-5 Asset Classification SchemeClassification Label Level of Hazard to the Unit