Question

A hospital is consolidating three legacy databases into a single data warehouse. The combined dataset will contain patient names and addresses (classified Internal), appointment schedules (classified Internal), and diagnosis codes with treatment histories (classified Restricted). The data warehouse team asks the data owner what classification and handling requirements should apply to the consolidated repository. What is the MOST appropriate guidance?

Accepted Answer

Apply the highest classification level (Restricted) and its handling requirements to the entire consolidated repository

Answer

Apply the classification of the largest volume of records, which is Internal, to reduce operational overhead

Answer

Average the classification levels of the source datasets to arrive at a balanced control set

Answer

Retain each dataset's original classification and apply controls only when that specific field is accessed