In short
Data classification sorts data into categories by sensitivity and importance, such as public, internal, confidential and restricted, so the right protections can be applied to each.
Key takeaways
- Data owners decide the classification; custodians, often technology staff, apply the controls.
- Classification drives encryption, access rights, retention and disposal.
- Labels should follow the data when it is copied or shared.
Where it's tested
ISC: Data Management & Governance — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
Why does an organization classify its data (for example public, internal, confidential and restricted)?