In a world dominated by technology, the protection of personal data, information stored by an organization has become crucial. Organizations are now more vulnerable to security threats due to their dependence on IT.
Information is a good that, like any other essential asset of a company, must be properly protected. By identifying and classifying information as well as performing a systematic risk assessment, the organization may select appropriate controls to keep in check these risks.