Problem: Data and asset classification are essential within an organization. The organization's security policy should identify and define security requirements based on the asset and data classification. This means implementing rules and regulations surrounding the protection of critical assets and data that can severely impact the organization if compromised. Discuss the importance of a critical assets list and how an organization can use it during an incident response.