Classification of information
A.5.12
-
Last updated
Applicable
Catalog reference
Classify information by sensitivity and criticality so handling rules can apply consistently. The classification scheme should reflect legal, regulatory, and business needs.
Narrative — how we satisfy this requirement
The asset register sorts information into Public, Internal, Confidential, and Restricted, and each class has its own handling rules.
Code
Title
No KPIs linked yet.