Group 2 Report

• Data classification - is broadly defined as the process of

  organizing data by relevant categories so that it may be

  used and protected more efficiently.
• Data classification is of

  particular importance when it comes to risk management,

  compliance, and data security.
• Context-based

  classification - looks at

  application, location,

  or creator among

  other variables as

  indirect indicators of

  sensitive information
• Content-based

  classification -

  software inspects

  and interprets files

  looking for sensitive

  information
• User-based classification -

  depends on a manual,

  end-user selection of each

  document. User-based

  classification relies on

  user knowledge and

  discretion at creation, edit,

  review, or dissemination

  to flag sensitive

  documents.
• High sensitivity data — if compromised or destroyed in an unauthorized

  transaction, would have a catastrophic impact on the organization or

  individuals. For example, financial records, intellectual property,

  authentication data.