ID.AM-07.136
Has your organization implemented a system for assigning data classifications to designated data types through tags or labels?
Explanation
Data classification through tags or labels helps organizations identify and manage sensitive information according to its security requirements. By implementing a tagging system, you can ensure appropriate controls are applied based on data sensitivity levels (e.g., public, internal, confidential, restricted). This practice enables automated policy enforcement, simplifies compliance reporting, and helps prevent data leakage or mishandling. Evidence could include screenshots of your data classification system showing how tags/labels are applied, documentation of your data classification policy that defines the tagging methodology, or examples of tagged documents/data with their corresponding classification levels.
Implementation Example
Assign data classifications to designated data types through tags or labels
ID: ID.AM-07.136
Context
- Function
- ID: IDENTIFY
- Category
- ID.AM: Asset Management
- Sub-Category
- Inventories of data and corresponding metadata for designated data types are maintained

