storage can be expensive an organization. A corporate setting can have thousands of employees generating volumes of data. Retaining this data takes up valuable, and classify, resources to back up, recover monitor delete unneeded data, these costs are Given the volume of data produced, it is inevitable that sensitive data will show up where it's not supposed to. A good example is e-mail. A service agent might try to help a customer by e-mail to resolve a payment problem. Despite the agent's intentions, the agent might include the customer's personal financial information the e-mail. Once that data is in the e-mail system. It's difficult to remove. The person receiving the e-mail may have designated others to view the mall. Backups of the desktop and mail system will copies of the personal information. Wherever that data resides or travels, the information must now be protected and handled appropriately. You can reduce the likelihood of accidental disclosure by routinely deleting data that is no longer needed for legal or business reasons. Classifying what's important ensures that the right data is deleted. Without retention policies, vital records could be lost. The retention policy can use data classification to help define handling methods. It’s important to work with management in determining the retention policy. It’s also important to work with legal staff. The legal obligations can change depending on the business context. Let's assume a service agent with a securities brokerage wrote an e-mail about a customer's stock trade. This type of e-mail correspondence must be retained by law. The Securities and Exchange Commission (SEC) Rule 1 requires all customer an accusation to This to ensure a is must be kept of fraud or misrepresentation. The SEC rule says the correspondence policy must in a at be altered or overwritten. This means data should specify how the data is to be backed up. An example is a requirement that even more be kept on write-once optical drives. Regulations make data classification A important in defining proper handling methods, that retention policy can help protect a company during a law suit. The courts have held they no sanction will be applied to organizations operating in good faith. This is true even if they lost the records as a result of routine operations. "Good faith" is demonstrated through retention policy that demonstrates how data is routinely classified, retained, and deleted. Recovering Information The need to recover information also drives the need for data classification. In a disaster, information that is mission-critical needs to be recovered quickly. Properly classifying data allows the more critical data to be identified. This data can then be handled with specific recovery requirements in mind. For example, an organization may choose to mirror critical data. This allows for recovery within seconds. In comparison, it can take hours to recover data from a tape backup. Table ll-2 depicts a sample recovery classification scheme.
đang được dịch, vui lòng đợi..
