Data Classification
What is Data Classification?
The process of categorising data based on its sensitivity and the impact of unauthorised disclosure. Common levels: Public, Internal, Confidential, Restricted.
Related terms
Frameworks that govern data classification
What the standards actually require on data classification
Requirements naming data classification across 6 standards, quoted from the control text.
ISMAP Data Protection establishes comprehensive data lifecycle controls. (1) Data Classification: customer government data must be classified per Japanese government data classification scheme + including (a) General + (b) Sensitive + (c) Confidential + (d) St...
ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS · ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM →Understand and document the classification scheme that applies to the data the workload processes, including handling requirements, storage locations, owners and the legal obligations attached to each class.
SEC07-BP01 · Understand your data classification scheme →Every data asset, in the cloud or on-premises, has the classification scheme applied, applied at the point of creation and always on; technology analyzes content to assign or guide classification continuously and users can validate automatic results;
edm-council-cdmc-cloud-data-management-capability-framework::2.2.2 · 2.2.2 Data classifications are applied and used →Agencies must give media a classification equal to the highest classification of any data held on it.
new-zealand-information-security-manual-nzism::13.2.7.C.01 · 13.2.7.C.01 Classify media at highest stored data classification →Approve and put into practice policies and procedures that classify data and govern how information is handled and labelled according to its confidentiality and criticality.
awwa-cybersecurity-guidance-for-the-water-sector-american-water-works-association::PM-5 · PM-5 Data classification and labelling →Attack Models. A data classification scheme and inventory are created so the most important data and systems can be protected appropriately.
AM1.2 · Create a data classification scheme and inventory →Questions people ask about data classification
What is Data Classification?
Why is Data Classification important for compliance?
What concepts are related to Data Classification?
Which compliance frameworks address Data Classification?
Where can I learn more about Data Classification?
See how Data Classification applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.