Mini$-$Project $35$: Data Classification Mini$-$Project Overview

Data classification is as fundamental a part of securing your organization's information as knowing what data you have and who can access it$.$ It's the process of identifying and assigning predetermined levels of sensitivity to different types of information. If your organization doesn$$t properly classify your data, then you cannot properly protect your data.

This mini$-$project builds upon the previous ITAM Mini$-$Project where you had to write a $4-$ to $5$ page document on the benefits of an ITAM solution.

Project Submission Steps

The technology refresh project is in full swing, as is your group$$s efforts to identify an ITAM solution. However, as you have been looking into how to deploy an ITAM solution and classify the company$$s IT assets, you keep seeing the phrase $$data classification$$ pop up$.$ After a bit of digging you realize that not only does the company not classify its assets, but it doesn$$t classify its data either

You bring your concerns to the Team Lead and tell them that this is something that you think should be included in the project. The Team Lead is concerned about $$scope creep$($as any good project manager should be$),$ so they ask you to document your findings and justify why it should be made a part of the project

Your task is to write a $4-$ to $5-$page paper that gives the Team Lead the information they$$ve asked for. The paper should include the following:

$$ Definition, scope and benefits of data classification

$$ How it could help the company from both a cost and compliance perspective $$ List specific compliance regimes such as Sarbanes$-$Oxley, export controls, and GDPR

$$ Proposed classification categories and what they might include

$$ Data retention: why it$$s important and how it might be implemented

$$ Document and data destruction

$$ How data classification would integrate with the new ITAM solution