حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 12 بند
Data Classification & Handling Compliance Checklist
قائمة التحقق هذه باللغة الإنجليزية.
Verifies that data is classified, labeled, and handled according to its sensitivity across its lifecycle.
ISO 27001:2022NIST 800-53SOC 2
PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.
Classification Scheme
- Is a documented data classification scheme (e.g., Public, Internal, Confidential, Restricted) established? *
- Are classification criteria based on confidentiality, integrity, and availability impact? *
- Are data owners assigned responsibility for classifying their data? *
Labeling & Inventory
- Is information labeled in accordance with the classification scheme? *
- Is an inventory of sensitive data stores (data map) maintained? *
- Is sensitive data discovery performed to find unmanaged or shadow data? *
Handling & Protection
- Are handling rules defined per classification level (storage, transmission, sharing)? *
- Are data loss prevention (DLP) controls applied to restricted data? *
- Is encryption applied to confidential and restricted data per policy? *
Retention & Disposal
- Are retention periods defined for each data classification? *
- Is data securely disposed of or anonymized at the end of its retention period? *
- Is media sanitization verified prior to disposal or reuse? *
نزّل قائمة تحقق Data Classification & Handling Compliance Checklist كاملة
احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.