SA/SNZ TS ISO/IEC 38505.3:2023
Information technology — Governance of data; Part 3: Guidelines for data classification
Standard identically adopts ISO/IEC TS 38305‐3:2021 which provides guidance on data classification in order to maintain oversight of data portfolios within the business context of a data governance policy.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$94.50 NZD
|
|
| HardCopy |
$105.00 NZD
|
|
| Networkable PDF |
Price varies
|
|
| Online Library ( Annual subscription) |
Info
Price varies
Online Library subscription information Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team. |
SA/SNZ TS ISO/IEC 38505.3:2023 Information technology -- Governance of data Guidelines for data classification
Preface
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Foundations
4.1 Context
4.1.1 The data deluge
4.1.2 The strategic value of data
4.1.3 The risks associated with data
4.1.4 Consequences of failure
4.2 Data classification
4.3 Purpose of classification:
4.4 Engage and empower staff
4.5 Structure of this document
5 Roles and responsibilities
5.1 General
5.2 Role of governing body
5.2.1 General
5.2.2 Understanding the role of data
5.2.3 Governance of data
5.2.4 Data classification approach
5.2.5 Data classification and risk management
5.2.6 Direct according to policy
5.2.7 Monitor conformance and performance
5.3 Role of management
5.3.1 General
5.3.2 Setting the scope of data classification
5.3.3 Propagating and implementing policy
5.3.4 Defining roles and responsibilities
5.3.5 Mobilizing the organization in support of the policy
5.3.6 Operation
5.3.7 Feedback from management to the governing body
5.3.8 Levels, discovery and attribution
5.4 Changing classifications
5.5 Defining the requirements: key considerations
6 Data classification framework
6.1 Context
6.2 Identification
6.3 Implementation
6.4 Monitor/Improve
7 Guiding principles
7.1 Simplicity
7.2 Default classifications
7.3 Interoperability
7.4 Equivalence
7.5 Use of data classification for processor and controller
7.6 Auditing, controls and compliance
7.7 Customer data
7.8 Assessment and reporting
7.9 Learning, maintaining and improving
7.10 Data protection
Bibliography
Keep me up-to-date
Register to receive notifications when updates are made to this standard.
Related Information
Similar Standards
-
AS/NZS 3802:1997
Data elements and interchange formats - Information interchange - Representation of dates and times
-
AS/NZS 5121:2015
Information technology - Vocabulary - Learning, education and training -
AS/NZS 5813.1:2012
Information technology equipment - Energy performance of computers - Part 1: Methods of measurement of energy performance -
AS/NZS 5813.2:2012
Information technology equipment - Energy performance of computers - Part 2: Minimum energy performance standards (MEPS) for computers
SA/SNZ TS ISO/IEC 38505.3:2023 Information technology -- Governance of data Guidelines for data classification
Preface
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Foundations
4.1 Context
4.1.1 The data deluge
4.1.2 The strategic value of data
4.1.3 The risks associated with data
4.1.4 Consequences of failure
4.2 Data classification
4.3 Purpose of classification:
4.4 Engage and empower staff
4.5 Structure of this document
5 Roles and responsibilities
5.1 General
5.2 Role of governing body
5.2.1 General
5.2.2 Understanding the role of data
5.2.3 Governance of data
5.2.4 Data classification approach
5.2.5 Data classification and risk management
5.2.6 Direct according to policy
5.2.7 Monitor conformance and performance
5.3 Role of management
5.3.1 General
5.3.2 Setting the scope of data classification
5.3.3 Propagating and implementing policy
5.3.4 Defining roles and responsibilities
5.3.5 Mobilizing the organization in support of the policy
5.3.6 Operation
5.3.7 Feedback from management to the governing body
5.3.8 Levels, discovery and attribution
5.4 Changing classifications
5.5 Defining the requirements: key considerations
6 Data classification framework
6.1 Context
6.2 Identification
6.3 Implementation
6.4 Monitor/Improve
7 Guiding principles
7.1 Simplicity
7.2 Default classifications
7.3 Interoperability
7.4 Equivalence
7.5 Use of data classification for processor and controller
7.6 Auditing, controls and compliance
7.7 Customer data
7.8 Assessment and reporting
7.9 Learning, maintaining and improving
7.10 Data protection
Bibliography
SA/SNZ TS ISO/IEC 38505.3:2023
Online Library subscription information
Online library subscriptions provide a cost-effective solution for organisations of any size to access the latest standards, offering 24/7 access to a personalised catalogue. The service ensures subscribers have have the most up-to-date version of selected standards, incluing automatic updates for any amendments or versions. Pricing is dependent on the chosen standards and the number of concurrent users, with discounts applied from the standards PDF price. For customised subscriptions or further inquiries, contact the Online Library team.