In the third video in Stryve’s seven-part series, Paul Delahunty, our Information Security Officer, chats to Kathleen Lucey, Client Director at Stryve, about the importance of knowing your assets.
Paul tells us that it is impossible to protect your assets if you do not know what your assets are. Assets, he explains, are anything of value to your company. Value, however, does not refer to monetary value, but rather, the role that these assets play in your organisation. In other words, you need to ask yourself what the impact on your business would be should asset X or Y be compromised.
After making an inventory and assessing the value of your assets, you must then look at access control. Data is often a firm’s most valuable asset, yet many organisations do not have strict controls over who has access to it. Access control should be on a need-to-know basis and every business should ensure they are enforcing it.