Information Classification
What is Information Classification?
A governance process that categorizes information assets based on their sensitivity and criticality to determine appropriate protection measures.
Terms that appear alongside information classification
Each of these is named in at least one of the same controls as information classification. The number is how many controls name both.
- asset management 7 shared controls
- policy 4 shared controls
- audit 2 shared controls
- data classification 2 shared controls
- confidentiality 2 shared controls
- nist 2 shared controls
- annex a 2 shared controls
- availability 2 shared controls
Frameworks that govern information classification
What the standards actually require on information classification
Requirements naming information classification across 6 standards, quoted from the control text.
Requirement defined in ISO 27017:2015, clause 8.2 (Information classification). See licensed source for normative text. Implementation focus is to demonstrate conformity with the obligations of this clause through the artefacts listed in evidence_requirements.
iso-27017-2015::8.2 · Information classification →Information classification and labeling. Control from ISO 27043 framework, domain: ISO 27043: Asset Management.
ISO27043-08 · Information classification and labeling →The information classification scheme must explicitly account for personal data, including its type and any special categories, so the organization knows what it processes, where it is stored and which systems it flows through, and the people under its control...
iso-27701-2019::6.5.2 · Information classification →Apply community wide classification scheme such as Traffic Light Protocol for shared information.
27010-7.1 · Information Classification for Sharing →Information classification and labeling. Control from ISO/SAE 21434 framework, domain: ISO/SAE 21434: Asset Management.
ISO21434-08 · Information classification and labeling →Operate asset management + information classification per Oman National Cybersecurity Framework. Maintain inventory of information systems + networks + endpoints + applications + data with documented owners + classification + criticality + protection requireme...
OMANCS-2 · Asset Management and Information Classification →Questions people ask about information classification
What is Information Classification?
Why is Information Classification important for compliance?
Which compliance frameworks address Information Classification?
Where can I learn more about Information Classification?
See how Information Classification applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.