Explain the need to establish an Information classification scheme that applies throughout the enterprise.
The Information classification scheme should:
- Define information classification levels based on their sensitivity (e.g., public, internal use, confidential, secret)
- Identify information owners who will be accountable for its proper handling.
- Ensure that information owners classify all information under their responsibility using the defined scheme and levels.
- Ensure that Classification covers the whole life cycle of information from its creation to its disposal.
Ensure that information is labelled, handled, protected and otherwise secured in a manner consistent with the data classification categories.