Cyberwarfare: Information Operations in a Connected World, 2nd Edition

Data Classification

Data classification is the process of labeling data based on its sensitivity and handling requirements. The U.S. government uses three primary classifications, with additional compartmentalization and security labels added based on specific organizational or handling needs (see Figure 13-1). Data classification and compartmentalization help the government ensure that only authorized individuals can access data and that the data are appropriately protected.

The U.S. government uses classification authorities—individuals trained to identify and assign the proper level of classification to data. Classification authorities also ensure that the data are classified for a valid and proper reason, and then ensure that they are marked ...