Risk Management for Cyber Security Managers - Information Classification

The video tutorial discusses the classification of data into categories based on importance and sensitivity. It covers personal information, which should be kept private, confidential data accessible only to authorized users, internal company data, and public information that should be accessible to everyone. The tutorial concludes with a brief mention of security controls to be discussed next.

Why is it important to classify data and information?

• To ensure all data is treated equally

• To prioritize data based on its importance and sensitivity

• To make data accessible to everyone

• To reduce the amount of data stored

Which of the following is considered personal information?

• Company's annual report

• Client's telephone number

• Public press release

• Employee's job title

What defines confidential data?

• Data that is encrypted

• Data available to the public

• Data accessible only by authorized users

• Data that is outdated

Which type of data includes employee salaries and technical information?

• Public information

• Personal information

• Confidential data

• Internal company data

What is an example of public information?

• Company's marketing brochure

• Client's credit card details

• Employee's personal email

• Internal project plans