From the course: CCSP Cert Prep: 2 Data Security

Unlock the full course today

Join today to access over 24,600 courses taught by industry experts.

Information classification

Information classification

- [Instructor] Organizations use information classification to help users understand the security requirements around handling different types of information. Data classification efforts often begin with a mapping exercise. Data mapping is designed to identify all the locations in an organization where sensitive information is stored, and then to develop an inventory of that information. From there, the organization can develop policies on data classification. These data classification policies describe the security levels of information used in an organization and the process for assigning information to a particular classification level. The different security categories for classifications used by an organization determine the appropriate storage, handling and access requirements for that data. Security classifications should be assigned based upon both the sensitivity of the information and the criticality of that…

Contents