CROSSWORD Domain 4.2

12345678910111213141516171819202122232425
Across
  1. 3. The continuous monitoring of an asset's location status ownership and condition
  2. 6. The designation of the person department or team responsible for an asset throughout its lifecycle
  3. 8. The investigation of a vendor's security policies history compliance and practices before entering a business relationship
  4. 12. The process of tracking and protecting hardware software and data throughout their useful life
  5. 16. The principle that responsibility for protecting maintaining and managing an asset can be assigned to specific parties
  6. 18. A detailed record of organizational assets including their type location owner version and status
  7. 19. The process of obtaining hardware software or data resources for an organization
  8. 22. The active process of identifying assets and documenting their relationships dependencies and presence on a network
  9. 23. Categorizing assets according to their sensitivity importance and criticality
  10. 25. Keeping information for a defined period according to organizational policy legal requirements or regulatory obligations
Down
  1. 1. A formal record confirming that an asset or storage device was securely destroyed
  2. 2. Evaluating a supplier's credibility security practices compliance and overall risk before purchasing products or services
  3. 4. The stages an asset passes through from acquisition to assignment monitoring and final disposal
  4. 5. The process of securely removing an asset from operational use at the end of its useful life
  5. 7. The formal process of evaluating selecting and purchasing assets that meet organizational requirements
  6. 9. Legal authorization that permits an organization to use software according to specified terms
  7. 10. A Configuration Management Database used to store information about assets systems configurations and relationships
  8. 11. Documented validation that disposal or decommissioning was performed according to policy and legal requirements
  9. 13. Physically cutting storage devices into small fragments to prevent data recovery
  10. 14. Physically damaging or eliminating hardware so that stored information cannot be recovered
  11. 15. Removing data from storage media so that it cannot be recovered even with advanced recovery techniques
  12. 17. A unique physical or digital identifier attached to an asset to support tracking and inventory
  13. 20. Third Party Risk Management involving the identification assessment and monitoring of risks from external vendors
  14. 21. Using a strong magnetic field to disrupt and erase data stored on magnetic media
  15. 24. A Service Level Agreement defining responsibilities performance expectations support and other requirements between parties