Content library
Data classification
Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä
Management of data sets
Data classification

Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä

Start free trial

Task description

Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä

Tiedon merkitsemistapojen pitää kattaa sekä fyysisessä että sähköisessä muodossa olevat tiedot ja niihin liittyvä suojattava omaisuus kuten tietovälineet.

Merkintöjen olisi oltava organisaation määrittelemien luokitteluperiaatteiden mukaisia ja helposti tunnistettavia. Organisaation olisi ohjeistettava, mihin ja miten merkinnät kiinnitetään. Ohjeistuksessa tulee ottaa huomioon myös tulosteet. Lisäksi tarpeettoman työn säästämiseksi kannattaa ohjeistaa, milloin merkintöjä ei tarvita.

Tietyissä tapauksissa, kuten esimerkiksi julkisuuslain mukaisista salassa pitoa koskevista merkinnöistä tulee myös käydä ilmi, miltä osin asiakirja on salassa pidettävä sekä mihin salassapito perustuu.



Requirements connected to the task

HAL-04.4: Suojattavat kohteet - merkitseminen
Julkri: TL IV-I

Other tasks from the same security theme

Task name
Priority
Policy
Other requirements
Documentation of data classes for data sets
Critical
High
Normal
Low
Data classification
25
requirements

Examples of other requirements this task affects

T07: Tietojen luokittelu
Katakri
8.2.1: Classification of information
ISO 27001
18.1.3: Protection of records
ISO 27001
ID.AM-5: Resource prioritization
NIST
HAL-04.2: Suojattavat kohteet - luokittelu
Julkri
See all related requirements and other information from tasks own page.
Go to >
Documentation of data classes for data sets
Definition of data classifications and class-specific security procedures
Critical
High
Normal
Low
Data classification
34
requirements

Examples of other requirements this task affects

T07: Tietojen luokittelu
Katakri
8.2.1: Classification of information
ISO 27001
8.2.2: Labelling of information
ISO 27001
8.2: Information classification
ISO 27001
8.2.3: Handling of assets
ISO 27001
See all related requirements and other information from tasks own page.
Go to >
Definition of data classifications and class-specific security procedures
Manufacturer's contact information on the packaging or accompanying documents
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

Article 13.16: Manufacturer’s information
CRA
See all related requirements and other information from tasks own page.
Go to >
Manufacturer's contact information on the packaging or accompanying documents
Classifying logical information assets
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Classifying logical information assets
National provider identifier
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
National provider identifier
Documentation of data and metadata for designated datatypes
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

ID.AM-07: Inventory of data and metadata
NIST 2.0
See all related requirements and other information from tasks own page.
Go to >
Documentation of data and metadata for designated datatypes
Definitions and instructions on information classifications
Critical
High
Normal
Low
Data classification
9
requirements

Examples of other requirements this task affects

8.2.1: Classification of information
ISO 27001
8.2.2: Labelling of information
ISO 27001
12.1.1: Documented operating procedures
ISO 27001
HAL-04.4: Suojattavat kohteet - merkitseminen
Julkri
5.13: Labelling of information
ISO 27001
See all related requirements and other information from tasks own page.
Go to >
Definitions and instructions on information classifications
Data classification for offices and physical data assets
Critical
High
Normal
Low
Data classification
2
requirements

Examples of other requirements this task affects

3.7: Establish and Maintain a Data Classification Scheme
CIS 18
See all related requirements and other information from tasks own page.
Go to >
Data classification for offices and physical data assets
Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

HAL-04.4: Suojattavat kohteet - merkitseminen
Julkri
See all related requirements and other information from tasks own page.
Go to >
Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä
Defining and implementing masking for confidential data
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

8.11: Data masking
ISO 27001
See all related requirements and other information from tasks own page.
Go to >
Defining and implementing masking for confidential data
Marking of equipment that needs safe disposal
Critical
High
Normal
Low
Data classification
8
requirements

Examples of other requirements this task affects

8.2.2: Labelling of information
ISO 27001
8.3.2: Disposal of media
ISO 27001
TEK-21: Sähköisessä muodossa olevien tietojen tuhoaminen
Julkri
5.13: Labelling of information
ISO 27001
CC6.5: Discontinuation of logical physical protections when no longer required
SOC 2
See all related requirements and other information from tasks own page.
Go to >
Marking of equipment that needs safe disposal
Review of data classification procedures
Critical
High
Normal
Low
Data classification
5
requirements

Examples of other requirements this task affects

8.2.3: Handling of assets
ISO 27001
3.7: Establish and Maintain a Data Classification Scheme
CIS 18
§ 2.5: Säkerhetsskyddsklassificering
SSL
§ 2.2.1 (Konfidentialitet): Informationssäkerhetsskyddsåtgärder
SSL
See all related requirements and other information from tasks own page.
Go to >
Review of data classification procedures
Identification of confidential information
Critical
High
Normal
Low
Data classification
1
requirements

Examples of other requirements this task affects

C1.1: Identification and maintainment of confidental information
SOC 2
See all related requirements and other information from tasks own page.
Go to >
Identification of confidential information

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessments
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security