Fundamentals of Information Systems Security, 4th Edition

Data Classification Standards

The goal and objective of a data classification standard is to provide a consistent definition for how an organization should handle and secure different types of data, which are protected through security controls that are within the seven domains of a typical IT infrastructure. Procedures and guidelines must define how to handle data within the seven domains of a typical IT infrastructure to ensure data security.

For businesses and organizations under recent compliance laws, data classification standards typically include the following major categories:

• Private data—Data about people that must be kept private. Organizations must use proper security controls to be in compliance.

• Confidential—Information or data ...