Classifying data is the first step in controlling its flow and we can help to make this happen.
Our electronic world is shrinking. Our countries are closer and business boundaries are changing. Our intellectual property is now more commonly contained and defined in data communications that flow around our organisations than at any point in the past.
As our businesses globalise more and more rapidly, our data is of more and more value and yet is less and less secure. Our Governments recognise the implications of poor data security and have implemented Data Security policies in some cases almost years ago. The interaction of government agencies with the community locally and globally have seen a call for a raft of measures to protect government data from exploitation.
There are many steps that can be implemented to secure data however commonly the most effective and least costly is to ensure the people that create the intellectual property are aware of the implications of loss and appropriately classify their content at the point of creation. If the users that create the information also classify the information, reasonably simple systems and processes can be implemented to track and appropriately protect the data.
Within government, mandates ensure all content is secured through policies including Protective Marking of documents and communications. Government workers today must select a level of classification for all messages to ensure policy can be applied to that information and it can be appropriately protected both with and externally.
Commonly content management solutions prompted for classification information which creates meta data in a database which in turn points to the location of the record. The addition of classification at the point of creation adds meta data and markings as required by policy to the content which can then added to EDM systems if needed. Mandatory classification at the point of creation ensures nothing slips the net of optional classification and should sensitive content be attached to a message it can be stopped at the boundary if needed or secured appropriately by certificate or SSL link based delivery.
Classification is a small and low cost step at the user or system level in the process of content creation but ensures a range of measures can be applied according to policy and systems architecture either locally or in cloud based solutions to ensure content remains secured while environments and threats change.