From the course: IAPP Certified Information Privacy Professional (CIPP/US) Cert Prep
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Data classification
From the course: IAPP Certified Information Privacy Professional (CIPP/US) Cert Prep
Data classification
- Organizations use information classification to help users understand the security requirements around handling different types of information. Data classification policies describe the security levels of information used in an organization and the process for assigning information to a particular classification level. The different security categories or classifications used by an organization determine the appropriate storage, handling, and access requirements for classified information. Security classifications are assigned based upon both the sensitivity of information and the criticality of that information to the enterprise. Classifications schemes vary, but all basically try to group information into high, medium, and low sensitivity levels, and differentiate between public and private information. For example, the military uses the familiar top secret, secret, confidential, and unclassified scheme. Businesses, on…