Security Classification

The security classification establishes the importance of Confidentiality, Integrity, and Availability for every data asset managed by IriusRisk.  The relationship between a security classification and data assets is many to one, so that many data assets can belong to the same security classification.

To create classification levels, use the Configuration → Security Classifications menu option:

The Confidentiality, Integrity, and Availability values are provided on a qualitative scale.  These values are used internally when IriusRisk calculates the risk rating for each identified threat.