Information Security Handbook

Data classification looks to understand

• What information assets are within your organization?
• What is the value of those assets to your organization?
• What will it take to properly secure those assets commensurate with their value?

An organization's information systems are jam-packed with data that is required for the organization to accomplish its mission. It is important when you begin the process of performing data categorization that you understand that not all data is made equal, and therefore, not all data has the same value to the organization. As a result, you will not be applying the same security controls to protect all data throughout the organization as this would result in wasting resources.

If you reserve your most difficult-to-implement ...