Data classification has long been a hot IT security topic and increased regulatory pressure is only making it hotter. Information Lifecycle Management (ILM) is further raising awareness about the need for data to be classified so that it is assigned to the right medium. Knowing classification is needed and achieving it are two different things. Understanding how to pursue a classification project is crucial to success.
The Matrix Is the Key
While technically not part of the actual classification process, the design of the classification matrix is a vital step that must be completed before classification can start. The design of the matrix will impact the classification process and so needs to be well thought out and structured. Elements to be included in the matrix include: