For the Unified Compliance FrameworkSupplement to Say What You Do: Building a framework of IT controls, policies, standards, and procedures, eBook edition |
|---|
Do you know exactly which IT system supports which key information in your company? |
|
|
Compliance
with every data protection regulation starts with categorizing your
company's information. Use this standard to get a jump on mapping
information to your IT systems.
- Ready-to-use template is compatible with most system and information classification frameworks - Over 100 predefined categories save you hundreds of hours - Harmonized terms and definitions prevent confusion and disagreement between records management and IT security |
Contents
Assurance objectives: Definitions of objectives for assuring the ongoing confidentiality, integrity, availability, and accountability of systems and information
System and information categories: Drawn from a series of Unified Compliance Framework authority documents, with harmonized terms, definitions, and assurance objectives. System categories: Controls and Oversight; Compliance Development and Enforcement; Planning and Resource Allocation; Internal Risk Management and Mitigation; Revenue Collection; Public Affairs; Third Party Relations; General Organizational Support; Administrative Management; Financial Management; Human Resources; Supply Chain Management; Information and Technology Management; Education; Healthcare; Law Enforcement; Legal, Litigation, and Judicial; Goods and Services Creation and Management; Credit and Insurance
More products |
System and information
|
