Data security technology — Rules for data classification and grading
Provides classification, grading and implementation processes for enterprise data management and cross-border preparations.
Overview
Specifies classification and grading principles, frameworks, methods and processes, including guidance on identifying important data.
Key points
01
Data classification
Use the classification framework and methods to organize data categories for grading and protection.
Clause 502
Data grading
Determine grades using grading factors and impact analysis; normative Annex G addresses important-data identification.
Clause 6 and Annex G03
Implementation
Provides sector-level and processor-level workflows for organizing classification and grading.
Clause 7