Information Classification Policies: Guidelines and procedures that outline how an organization’s data and information should be classified based on its sensitivity and importance. These policies help to ensure that the appropriate level of protection is applied to the data and information. Examples of information classification policies include access control policies, data retention policies, and data disposal policies.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D1: Security Concepts and Practices
« Back to Glossary Index