ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

The process, planning, and design phase of the asset-management lifecycle begins with identifying what must be protected and determining its business importance. Creating a formal inventory and classification scheme assigns each asset an owner, a sensitivity or criticality rating, and other key metadata. This information becomes the foundation for later lifecycle activities such as automated discovery, secure configuration baselines, patch schedules, retention rules, and disposal procedures. Implementing discovery tools, defining hardening guides, or drafting destruction processes before a clear inventory and classification exist can waste effort because the organization has not yet agreed on which assets exist or how valuable they are.