U.S. flag

An official website of the United States government, Department of Justice.

NCJRS Virtual Library

The Virtual Library houses over 235,000 criminal justice resources, including all known OJP works.
Click here to search the NCJRS Virtual Library

Data Classification: The Enabler for Secure Content Management

NCJ Number
217102
Journal
Homeland Defense Journal Volume: 4 Issue: 11 Dated: November 2006 Pages: 48-50
Author(s)
Dr. David Smith
Date Published
November 2006
Length
3 pages
Annotation
This article discusses the categorization and classification of data for security purposes and describes tools that provide an automated means for discovering, classifying, and managing business information.
Abstract
Data "categorization" is the identification and organization of electronic information assets according to their file type, i.e., text documents, photos, spreadsheets, applications, etc. What is needed is an easy and reliable way to automate what can be a tedious and time-consuming process that involves millions of files. Fortunately, there are commercial solutions that perform this work. The best tool not only categorizes information assets but is also part of an integrated information technology (IT) security system that performs data classification. Once data has been categorized, it then must be organized into a classification system that addresses the security requirements of data content. In the classification process, IT security managers must make tough decisions about what information is vital, what is highly sensitive, what is important for legal or regulatory compliance, what will be required for audits, and what is less important or not critical to the business. This article provides a checklist of issues to consider in making data classification decisions. In performing data security management, organizations need an automated solution that discovers, classifies, and manages business information, enabling the next phase of information lifecycle management for their files. The EMC Software Group has developed the Documentum Enterprise Content Management platform, a unified solution that controls, secures, and tracks information and also disposes of all copies regardless of where they reside. It gives content owners the ability to restrict user access, set up watermarks, block printing or forwarding to unauthorized recipients, and revoke the ability to open a file.