evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 12557 (c) Information labeling and handling An appropriate set of procedures for information labeling and handling should be developed and implemented in accordance with the classification scheme adopted by the organization. Procedures for information labeling need to cover information assets in physical and electronic formats. (d) Ownership of Information assets All information and assets associated with information processing facilities should be owned by a designated part of the organization. The asset owner should be responsible for: a. ensuring that information and assets associated with information processing facilities are appropriately classified; b. defining and periodically reviewing access restrictions and classifications, taking into account applicable access control policies. (e) Acceptable use of Information assets Rules for the acceptable use of information assets associated with information processing facilities should be identified, documented, and implemented. All employees, contractors and third party users should follow rules. (f) Responsibilities Owners, custodian and others should be identified and assigned with the responsibility of information asset management within an agency. Their responsibilities shall be clearly defined and reviewed periodically for seamless protection of information asset. Archival of information and retention period of information asset must also be considered while defining the responsibilities. 8. Strategy for Information Security (1) Agency before preparing its Information Security Policy should set a plan for integrating process, people, technology, procedures to safeguard its information from threats. The strategy should be reviewed periodically to mitigate newer threats and vulnerabilities in the area of information security. This section will assist the agency to understand the best practices of Information Security Strategy in the globe and will help them prepare their own strategy or adopt available best practices.