Getting started: How to create and monitor data classification levels

The Data Classification Module allows you to organize data attributes and objects into categories based on sensitivity, file type, contents, and other metadata. These classification levels can be used in other RESPONSUM modules to accurately determine the level of security required and to monitor risks.

Navigate

Go to Data Management > Data Classification.

Create a Data Classification Scheme

RESPONSUM allows you to either start from a template data classification scheme or to create levels from scratch.

Template Scheme

1. Click ‘+ Add New Level’.
2. Click ‘Start from a template’.
3. Select a template scheme from the list.
4. Click ‘save’.
5. All levels can be edited by clicking on ‘edit’.

Start from Scratch

1. Click ‘+ Add New Level’.
2. Click ‘Define a new scheme’
3. Create a data classification scheme level by filling out the scheme level fields.

Data Scheme Level Properties

All data classification scheme levels have the following properties:

Property	Description
Name	Mandatory field to provide the classification scheme level a name.
Data attributes	Mandatory field where all data attributes that are in scope can be listed.
Authorized personnel	Mandatory field to define which personnel is authorized to access the data.
Importance of integrity	Mandatory field to define importance of integrity. Following values can be selected from the list: low/moderate/high/very high.
Importance of availability	Mandatory field to define importance of availability. Following values can be selected from the list: low/moderate/high/very high.
Examples	This field can be used to document examples of how this data classification scheme can be interpreted.
Tags	Can be added to improve filtering.

Monitor

When all the mandatory fields are filled out, the level can be saved. A scheme can be created by creating multiple levels. Once the data classification scheme is created, the maximum data classification level can be linked to the following items:

• Hardware
• Software
• Services
• Policies (coming soon)
• Procedures (coming soon)

When the there is a discrepancy between the data processed by the system and the data classification level in the register, the user will be notified.