Question

An information security manager is establishing a new data classification scheme for an organization that currently stores all data at a single sensitivity level. After defining the classification categories (public, internal, confidential, restricted), what should the manager do NEXT to make the scheme operationally effective?

Accepted Answer

Define the handling, storage, and protection requirements associated with each classification level

Answer

Deploy a data loss prevention (DLP) solution to enforce the classification categories automatically

Answer

Conduct a full inventory of all structured and unstructured data across the enterprise

Answer

Require every data owner to immediately re-label all existing data assets