Managing Catastrophic Loss of Sensitive Data

Chapter 2. Data Classification

Solutions in this chapter:

• Introduction

• Security Objectives

• Potential Impact

• Classification Levels

• Data Ownership and Usage

• Data Sharing

• Metadata

• Classification Project

• The Data Life Cycle

Summary

Introduction

One of the fundamental elements of an information security program is the existence of and adherence to a formal data classification scheme. Data classification allows an organization to categorize information assets and define their sensitivity and confidentiality. This facilitates data security by helping identify the appropriate level of protection as well as the audience that may access the data. Without a classification ...