From the course: CISSP Cert Prep (2021): 2 Asset Security

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Information classification

Information classification

From the course: CISSP Cert Prep (2021): 2 Asset Security

Start my 1-month free trial

Information classification

“

- [Narrator] Organizations use data classification policies to help users understand the security requirements around handling different types of information. Data classification policies describe the security levels of information used in an organization and the process for assigning information to a particular classification level. The different security categories or classifications used by an organization determine the appropriate storage, handling, and access requirements for classified information. Security classifications are assigned based upon both the sensitivity of the information and the criticality of that information to the enterprise. Classification schemes vary, but all basically try to group information into high, medium, and low sensitivity levels and differentiate between public and private information. For example, the military uses the familiar top secret, secret, confidential, and unclassified scheme. A…

Contents