Security Policies and Implementation Issues

Chapter 11. Data Classification and Handling Policies and Risk Management Policies

DATA SUSTAINS AN ORGANIZATION'S business processes and enables it to deliver products and services. Stop the flow of data, and just as quickly you disrupt the ability to deliver products and services. If the loss of data lasts long enough, the viability of the organization itself comes into question. That's how vital data is for many organizations today.

Data classification is a useful way to rank the importance of data to an organization. There are also standardized methods of understanding the importance of business processes to the organization. When you combine these techniques, you can define handling policies. These policies help prevent disruption of services. ...