The Data Classification Module allows you to organize data attributes and objects into categories based on sensitivity, file type, contents, and other metadata. These classification levels can be used in other RESPONSUM modules to accurately determine the level of security required and to monitor risks.
Navigate
Go to Data Management > Data Classification.
Create a Data Classification Scheme
RESPONSUM allows you to either start from a template data classification scheme or to create levels from scratch.
Template Scheme
- Click ‘+ Add New Level’.
- Click ‘Start from a template’.
- Select a template scheme from the list.
- Click ‘save’.
- All levels can be edited by clicking on ‘edit’.
Start from Scratch
- Click ‘+ Add New Level’.
- Click ‘Define a new scheme’
- Create a data classification scheme level by filling out the scheme level fields.
Data Scheme Level Properties
All data classification scheme levels have the following properties:
Property | Description |
Name | Mandatory field to provide the classification scheme level a name. |
Data attributes | Mandatory field where all data attributes that are in scope can be listed. |
Authorized personnel | Mandatory field to define which personnel is authorized to access the data. |
Importance of integrity | Mandatory field to define importance of integrity. Following values can be selected from the list: low/moderate/high/very high. |
Importance of availability | Mandatory field to define importance of availability. Following values can be selected from the list: low/moderate/high/very high. |
Examples | This field can be used to document examples of how this data classification scheme can be interpreted. |
Tags | Can be added to improve filtering. |
Monitor
When all the mandatory fields are filled out, the level can be saved. A scheme can be created by creating multiple levels. Once the data classification scheme is created, the maximum data classification level can be linked to the following items:
- Hardware
- Software
- Services
- Policies (coming soon)
- Procedures (coming soon)
When the there is a discrepancy between the data processed by the system and the data classification level in the register, the user will be notified.