ISO/IEC TS 38505-3:2021-12

Englischer Titel: Information technology - Governance of data - Part 3: Guidelines for data classification
Ausgabedatum: 2021-12
Originalsprachen: Englisch
Seiten: 17

ab 112,20 EUR inkl. MwSt.

ab 104,86 EUR exkl. MwSt.

Format- und Sprachoptionen

PDF-Download

Versand (3-5 Werktage)

Mit dem Normenticker beobachten

Diese Option ist erst nach dem Login möglich.

Produktinformationen auf dieser Seite:

Schnelle Zustellung per Download oder Versand

Sicherer Kauf mit Kreditkarte oder auf Rechnung

Jederzeit verschlüsselte Datenübertragung

Inhaltsverzeichnis

Inhalt (en)

Foreword
Introduction
Scope
Normative references
Terms and definitions
Foundations
- Context
  - The data deluge
  - The strategic value of data
  - The risks associated with data
  - Consequences of failure
- Data classification
- Purpose of classification:
- Engage and empower staff
- Structure of this document
Roles and responsibilities
- General
- Role of governing body
  - General
  - Understanding the role of data
  - Governance of data
  - Data classification approach
  - Data classification and risk management
  - Direct according to policy
  - Monitor conformance and performance
- Role of management
  - General
  - Setting the scope of data classification
  - Propagating and implementing policy
  - Defining roles and responsibilities
  - Mobilizing the organization in support of the policy
  - Operation
  - Feedback from management to the governing body
  - Levels, discovery and attribution
- Changing classifications
- Defining the requirements: key considerations
Data classification framework
- Context
- Identification
- Implementation
- Monitor/Improve
Guiding principles
- Simplicity
- Default classifications
- Interoperability
- Equivalence
- Use of data classification for processor and controller
- Auditing, controls and compliance
- Customer data
- Assessment and reporting
- Learning, maintaining and improving
- Data protection
Bibliography

ICS

35.020

Normen mitgestalten

Lade Empfehlungen...