This objective, and the other similar ‘Approach For‘ objectives, simply state what has to be in your Agreed Ways Of Working for the Product Delivery Organisation. You may want to include more, but you cannot be missing any of these and still run a secure Product Delivery Organisation.
- Group or Individual
- Product Delivery Organisation
- Artefact
- Agreed Ways Of Working
- Concepts
- Product Data Classification
- Document
- Approach For Product Data Classification
- Risk Type
- Viability
- Event
- An investigation into negligence
- Caused By
- Product Teams being unaware of the types and sensitivity of data that their Products are handling
- Leading To
- A substantial fine and/or sanction from an external regulatory body
-
O-OM-A-2-1
Operations > Operational Management > Data Protection
- Do you maintain a data catalog, including types, sensitivity levels, and processing and storage locations?