Implementing an Information Classification Scheme

Explain the need to establish an Information classification scheme that applies throughout the enterprise.

The Information classification scheme should:

  1. Define information classification levels based on their sensitivity (e.g., public, internal use, confidential, secret)
  2. Identify information owners who will be accountable for its proper handling.
  3. Ensure that information owners classify all information under their responsibility using the defined scheme and levels.
  4. Ensure that Classification covers the whole life cycle of information from its creation to its disposal.

Ensure that information is labelled, handled, protected and otherwise secured in a manner consistent with the data classification categories.

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>