- Introduction
- Introduction
- Basic Security Principles
- Basic Security Principles
- Data Management: Determining and Maintaining Ownership
- Data Management: Determining and Maintaining Ownership
- Data Governance Policies
- Data Governance Policies
- Roles and Responsibilities
- Roles and Responsibilities
- Data Ownership
- Data Ownership
- Data Custodians
- Data Custodians
- Data Documentation and Organization
- Data Documentation and Organization
- Data Warehousing
- Data Warehousing
- Data Mining
- Data Mining
- Knowledge Management
- Knowledge Management
- Data Standards
- Data Standards
- Data Lifecycle Control
- Data Lifecycle Control
- Data Audits
- Data Audits
- Data Storage and Archiving
- Data Storage and Archiving
- Data Security, Protection, Sharing, and Dissemination
- Data Security, Protection, Sharing, and Dissemination
- Privacy Impact Assessment
- Privacy Impact Assessment
- Information Handling Requirements
- Information Handling Requirements
- Record Retention and Destruction
- Record Retention and Destruction
- Data Remanence and Decommissioning
- Data Remanence and Decommissioning
- Classifying Information and Supporting Asset Classification
- Classifying Information and Supporting Asset Classification
Information Handling Requirements
Organizations handle large amounts of information and should have policies and procedures in place that detail how information is to be stored. You can think of policies as high-level documents and procedures as step-by-step instructions. Many organizations are in industries that are subject to regulatory standards that detail how and how long information must be retained.
One key concern with storage is to ensure that media is appropriately labeled. Media should be labeled so that the data librarian or individual in charge of media management can identify the media owner, when the content was created, the classification level, and when the content is to be destroyed. Figure 2.3 shows an example of appropriate media labeling.
FIGURE 2-3 Data Labeling
