I'm working on an interesting project at uni and to give you a quick run down the idea is to search the internet for information about a certain company which could then be put together in a series of theoretical attacks against their IT systems. They could be social or technical and before you ask yes the company is aware i'm doing this so there's no legal issues haha! They want a report on my results so its basically an audit. I'll be looking for things like what software is used and version numbers, hardware specs, network details if i can find any etc.. Currently i'm designing a database to house all the information found from the searches.
What i'm struggling with at the moment is how to classify the data into categories. I want to be able to maximize the usefulness of the database and make it easy to recall information. Do you guys have any suggestions on classifications? Or where i can look for similar projects to see how others have done it? Any input would be greatly appreciated!