CompTIA® Security+™: Study Guide, Fifth Edition

Classifying Information

Information classification is a key aspect of a secure network. Again, the process of developing a classification scheme is both a technical and a human issue. The technologies you use must be able to support your organization’s privacy requirements. People and processes must be in place and working effectively to prevent unauthorized disclosure of sensitive information.

For this exam, CompTIA has an objective related to classifying data as “hard” or “soft.” These are not standard industry terms for data classification. In general, however, anything “soft” is subject to adaptation, while anything “hard” is not. Soft mechanisms ...