Critical Systems and Information Forms

Having an inventory of existing equipment and being able to track the organization’s documents is just part of the task. If the organization has not provided you with information on critical information and systems, you will have to work with them to determine these items. The Organization Information Criticality Matrix (OICM) is shown in Table B.3 and the Systems Criticality Matrix is shown in Table B.4.

Table B.3. Organization Information Criticality Matrix (OICM)
OICMConfidentialityAvailabilityIntegrity
 
 
 
High Watermark   
Table B.4. Systems Criticality Matrix (SCM)
SCMConfidentialityAvailabilityIntegrity
 
 
 
High Watermark   

Get Inside Network Security Assessment: Guarding Your IT Infrastructure now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial