5.12
Leadership
Classify information based on organization’s security needs: confidentiality, integrity, availability, and relevant stakeholder requirements.
-
5.6.2.1 Organizations shall determine on a case-by-case basis what business information and software (including but not limited to sensitive information) is essential to the functioning of the organization, and
how frequently this information changes.NOTE: As an example, critical workstations and servers may require daily incremental backups, whereas desktops may be recovered from one common image.5.6.2.2 Organizations shall determine on a case-by-case basis what systems to back up and at what frequency since every system will have different back-up and recovery requirements.
-
-