DM-01—Data Classification Criteria
>Control Description
Theme
Type
Policy/Standard
Data Management Policy>Implementation Guidance
1. Ensure that a Data Classification Criteria is defined and documented. 2. Ensure that this criteria is reviewed and approved periodically and appropriate documentation for the review is retained. 3. Ensure that a process is defined and implemented to ensure data is treated according to its data classification level.
>Testing Procedure
1. Inspect Organization's policy and/or standard to determine whether Organization's data classification criteria is defined. 2. Inspect whether the criteria is periodically reviewed and approved by the management. 3. Validate using sample testing that data is categorized and treated according to its data classification level and defined controls.
>Audit Artifacts
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.