SFS 4 / SF 1

Back to SFS 4

Status: Question model review passed; solution and completed SF authoring pending.

This is a generated authoring draft. Human approval and operational assessment results have not been supplied.

Question

Are organization-owned data assets consistently classified into defined security categories with corresponding handling requirements throughout the review period?

Plain-language explanation

Model-reviewed question draft. Completed explanations and a canonical solution are pending. The proposed positive criterion is: Documented evidence showing consistent classification implementation across all data assets

Assessment criterion and evidence

Actor: Organization data custodians. Scope: All organization-owned data assets across local, network-attached, and cloud storage systems. Evidence period: Throughout the review period. Required evidence: Documented data classification policy with defined categories; Evidence of classification implementation across storage systems. Negative criterion: Absence of documented categories or inconsistent application of classification labels. Missing evidence: Pending classification assessment due to unavailable policy documentation

View the JSON record (opens in a new tab).

Assessment result: unset.