Beginner
274 CREDS
Classify information before protecting it, since a control applied evenly to everything protects the wrong things well.
You can classify data and justify why each label was chosen.
- Assign classification levels to a realistic set of documents and data stores.
- Map the lifecycle of one record from creation through retention to disposal.
- Decide which of confidentiality, integrity, and availability dominates for each class.