Requirement

Data classification

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Fulfill this requirement by completing the tasks below ->
Data classification
This requirement is part of the framework:  

Other requirements of the framework

No items found.
0
Data classification
No items found.
Management of data sets
Best practices
How to implement:
Data classification
This policy on
Data classification
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.
Read below what concrete actions you can take to improve this ->
Management of data sets
Data classification
Frameworks that include requirements for this topic:
Säkerhetsskyddslagen (Sverige)
CRA (Cyber Resilience Act)
NIST CSF 2.0
CIS 18 controls
DORA simplified RMF
NSM ICT Security Principles (Norway)

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
Data classification
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
Documentation of data classes for data sets
Critical
High
Normal
Low
25
requirements
Management of data sets
Data classification

Documentation of data classes for data sets

This task helps you comply with the following requirements

T07: Tietojen luokitteluKatakri
8.2.1: Classification of informationISO 27001
18.1.3: Protection of recordsISO 27001
ID.AM-5: Resource prioritizationNIST
HAL-04.2: Suojattavat kohteet - luokitteluJulkri
5.12: Classification of informationISO 27001
5.33: Protection of recordsISO 27001
CC2.1: Quality information to support internal controlsSOC 2
PI1.1: Definitions of processed dataSOC 2
T-08: TIETOJEN LUOKITTELUKatakri 2020
Definition of data classifications and class-specific security procedures
Critical
High
Normal
Low
34
requirements
Management of data sets
Data classification

Definition of data classifications and class-specific security procedures

This task helps you comply with the following requirements

T07: Tietojen luokitteluKatakri
8.2.1: Classification of informationISO 27001
8.2.2: Labelling of informationISO 27001
8.2: Information classificationISO 27001
8.2.3: Handling of assetsISO 27001
11.2.5: Removal of assetsISO 27001
11.2.6: Security of equipment and assets off-premisesISO 27001
14.1.2: Securing application services on public networksISO 27001
14.1.3: Protecting application services transactionsISO 27001
ID.AM-5: Resource prioritizationNIST
Manufacturer's contact information on the packaging or accompanying documents
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

Manufacturer's contact information on the packaging or accompanying documents

This task helps you comply with the following requirements

Article 13.16: Manufacturer’s informationCRA
Classifying logical information assets
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

Classifying logical information assets

This task helps you comply with the following requirements

No items found.
National provider identifier
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

National provider identifier

This task helps you comply with the following requirements

No items found.
Documentation of data and metadata for designated datatypes
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

Documentation of data and metadata for designated datatypes

This task helps you comply with the following requirements

ID.AM-07: Inventory of data and metadataNIST 2.0
Definitions and instructions on information classifications
Critical
High
Normal
Low
9
requirements
Management of data sets
Data classification

Definitions and instructions on information classifications

This task helps you comply with the following requirements

8.2.1: Classification of informationISO 27001
8.2.2: Labelling of informationISO 27001
12.1.1: Documented operating proceduresISO 27001
HAL-04.4: Suojattavat kohteet - merkitseminenJulkri
5.13: Labelling of informationISO 27001
CC2.1: Quality information to support internal controlsSOC 2
PI1.1: Definitions of processed dataSOC 2
1.3.2: Classification of information assetsTISAX
3.7: Establish and Maintain a Data Classification SchemeCIS 18
Data classification for offices and physical data assets
Critical
High
Normal
Low
2
requirements
Management of data sets
Data classification

Data classification for offices and physical data assets

This task helps you comply with the following requirements

3.7: Establish and Maintain a Data Classification SchemeCIS 18
Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

Lakisääteisten vaatimusten huomiointi tietoluokitteluun liittyvissä merkinnöissä

This task helps you comply with the following requirements

HAL-04.4: Suojattavat kohteet - merkitseminenJulkri
Defining and implementing masking for confidential data
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

Defining and implementing masking for confidential data

This task helps you comply with the following requirements

8.11: Data maskingISO 27001
Marking of equipment that needs safe disposal
Critical
High
Normal
Low
8
requirements
Management of data sets
Data classification

Marking of equipment that needs safe disposal

This task helps you comply with the following requirements

8.2.2: Labelling of informationISO 27001
8.3.2: Disposal of mediaISO 27001
TEK-21: Sähköisessä muodossa olevien tietojen tuhoaminenJulkri
5.13: Labelling of informationISO 27001
CC6.5: Discontinuation of logical physical protections when no longer requiredSOC 2
1.3.2: Classification of information assetsTISAX
PR.PS-03: Hardware managementNIST 2.0
3.5: Securely Dispose of DataCIS 18
Review of data classification procedures
Critical
High
Normal
Low
5
requirements
Management of data sets
Data classification

Review of data classification procedures

This task helps you comply with the following requirements

8.2.3: Handling of assetsISO 27001
3.7: Establish and Maintain a Data Classification SchemeCIS 18
§ 2.5: SäkerhetsskyddsklassificeringSSL
§ 2.2.1 (Konfidentialitet): InformationssäkerhetsskyddsåtgärderSSL
Identification of confidential information
Critical
High
Normal
Low
1
requirements
Management of data sets
Data classification

Identification of confidential information

This task helps you comply with the following requirements

C1.1: Identification and maintainment of confidental informationSOC 2
Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
Data classification
of the framework  
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
No other tasks found.
Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessments
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security