What is data classification?
Data classification is the process of finding out what information an organization holds and labeling it by how sensitive it is, such as Public, Internal or Confidential. A label tells people how to handle a file, and tells security tools which policy to apply when that file moves.
How does data classification work?
-
Scan
Endpoints, file servers and shared folders are searched for sensitive files.
-
Recognize
Content, context and existing labels say what each file is.
-
Label
A visible label and a metadata tag travel with the file.
-
Act
Policies use the label the moment the file moves.
What does classification look like in practice?
- Data
- Signed supplier contract
- User
- Procurement specialist
- Destination
- Department file share
- Policy
- Contracts are Confidential
- Decision
- Record labeled Confidential
Where is classification in GuardStance?
One agent finds files, labels them and enforces the policy; network shares are scanned without an agent.