A policy assigns data classification to no named accountable role. Why is this a governance concern?

Published
  1. Classification can only be decided by an external software vendor
  2. Handling requirements may be inconsistent because business ownership is unclear
  3. Technical encryption makes classification irrelevant
  4. All data must therefore be deleted immediately

Comments — 0