网络安全 GRC 12 项
Data Classification & Handling Compliance Checklist
此检查清单为英文版。
Verifies that data is classified, labeled, and handled according to its sensitivity across its lifecycle.
ISO 27001:2022NIST 800-53SOC 2
免费 PDF 或 Word · 输入邮箱即可下载。
Classification Scheme
- Is a documented data classification scheme (e.g., Public, Internal, Confidential, Restricted) established? *
- Are classification criteria based on confidentiality, integrity, and availability impact? *
- Are data owners assigned responsibility for classifying their data? *
Labeling & Inventory
- Is information labeled in accordance with the classification scheme? *
- Is an inventory of sensitive data stores (data map) maintained? *
- Is sensitive data discovery performed to find unmanaged or shadow data? *
Handling & Protection
- Are handling rules defined per classification level (storage, transmission, sharing)? *
- Are data loss prevention (DLP) controls applied to restricted data? *
- Is encryption applied to confidential and restricted data per policy? *
Retention & Disposal
- Are retention periods defined for each data classification? *
- Is data securely disposed of or anonymized at the end of its retention period? *
- Is media sanitization verified prior to disposal or reuse? *
下载完整的Data Classification & Handling Compliance Checklist检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。