Information Security Handbook

Information categorization

The information security professional must work with the organization's business and IT groups to properly classify the data used by the organization to successfully complete its mission. Data classification is a key initial step in establishing a strong information security program. The process of conducting data classification exercises with business leaders within your organization will allow the organization's leader to be part of the decision-making process for how data will be secured within the organization and how resources will be applied. By conducting this process, you, as the information security professional, ensure that you are highlighting the critical information assets of the organization and are ...