3.7—Establish and Maintain a Data Classification Scheme
IG2
IG3
Data
Identify
>Control Description
Establish and maintain an overall data classification scheme for the enterprise. Enterprises may use labels, such as “Sensitive,” “Confidential,” and “Public,” and classify their data according to those labels. Review and update the classification scheme annually, or when significant enterprise changes occur that could impact this Safeguard.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.