Domain 2 · Objective reference 2.1 · Chapter 13 of 62
Classify information and assets
About 5 minutes · Current ISC2 outline effective 15 April 2024; the announced 15 April 2027 replacement requires separate mapping
Session only. Enable saving or download a backup from this course’s hub.
Completion is self-reported and does not certify understanding.
See it · Try it · Recall it
Picture the topic
Remember this: The owner classifies according to value and obligations.
Explore the anchors
Locate information and associated assets.
Concept matching activity
Match this task or description to its concept:
Evaluate sensitivity criticality and requirements.
Choose a concept before checking the explanation.
A quick way to study this topic
- Hide the explanation and redraw these three anchors from memory.
- Explain the difference between the anchors in your own words.
- Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
- Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.
Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.
What this chapter explains
- Concepts and mechanisms
- Design, evidence and tradeoffs
Concepts and mechanisms
Classification relates business sensitivity and consequence to handling requirements. Information and the systems supporting it can have different roles in that decision: a public website may rely on highly sensitive administrative credentials. Owners define classification using approved criteria, while labels communicate the result. A label alone does not enforce access, retention or sharing.
Design, evidence and tradeoffs
Use a consistent scheme, identify ownership and account for confidentiality, integrity and availability needs. Classification should follow relevant copies and derived data, including models, logs and backups. Reassess when purpose, aggregation or audience changes. Several individually harmless records can reveal sensitive information when combined. Do not treat a vendor’s default label as the organization’s complete decision.
Worked example
A public report is low-sensitivity content, but its publication workflow needs high integrity because unauthorized edits could mislead customers.
Check your understanding
Can public information have an important integrity requirement?
Show explanation
Yes. Public availability does not make unauthorized modification acceptable or harmless.
Source and study boundary
Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.