Cybersecurity Glossary
Data Classification
Sorting information into a few levels so that handling rules can follow the level.
What Data Classification means
Three or four levels are enough for most organisations: public, internal, confidential and, where relevant, restricted. Each level carries rules about storage, sharing, retention and disposal. Labels can be applied automatically in Microsoft 365 and similar platforms.
Why Data Classification matters for small businesses and nonprofits
Without classification, every document is treated the same, which in practice means treated casually. Classification is what makes it possible to apply strong controls where they matter without slowing down everything else.
What to do about Data Classification
- Use no more than four levels, or people will guess
- Apply labels to the highest value material first rather than everything at once
- Attach concrete handling rules to each level, not just a name
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.