Classification of information
A.5.12
-
Last updated
Applicable
Catalog reference
Classify information by sensitivity and criticality so handling rules can apply consistently. The classification scheme should reflect legal, regulatory, and business needs.
Narrative — how we satisfy this requirement
The asset register sorts information into Public, Internal, Confidential, and Restricted, and each class has its own handling rules.
Code
Title
No procedures are linked to this requirement yet. Link from a procedure's Edit page.