Asset Handling — CISSP Study Guide

Bundled into the existing Certified Information Systems Security Professional premium course — no separate purchase.

Included in this chapter:

Dimension	Security marking	Security labeling
Form	Human-readable (header, cover sheet, watermark, cartridge tape)	Part of the object's data structure (metadata tag, sensitivity attribute)
Audience	People who handle the asset	Systems that mediate access to the asset
Enforcement	Manual: a handler reads it and applies the rule	Automated: a system parses it for access decisions (e.g., mandatory access control)
Typical use	Documents, removable media, printed output	Files, records, objects under access-control mediation
Fails when	Handler ignores or never sees the mark	Label is stripped, spoofed, or not bound to the object

Cheat sheet

Handling rules are derived from the classification level, never set per-asset
Handling standards must get stricter as classification rises
A security marking is human-readable; a person reads it and applies the rule
A security label is part of the object's data structure; a system enforces it
Pick marking when a person enforces, labeling when a system enforces
The sanitization category is chosen by data confidentiality first, media type second
Clear resists simple recovery; the media stays reusable
Purge resists laboratory recovery, yet keeps the media usable
Destroy resists lab recovery AND renders the media itself unusable
Media leaving organizational control is the moment that escalates everything
Media moving outside a controlled area needs a controlled transport path
Storage protection rises by classification tier
Sanitization is incomplete until you validate and document it
Map the MP control family to the handling actions it governs
Cryptographic erase sanitizes the key, not the ciphertext-bearing media
Mixed-classification media and documents take the HIGHEST level present

Unlock with Premium — includes all practice exams and the complete study guide.