This website uses cookies to ensure you get the best experience.
Learn more.
A policy assigns data classification to no named accountable role. Why is this a governance concern?
Published
- Classification can only be decided by an external software vendor
- Handling requirements may be inconsistent because business ownership is unclear
- Technical encryption makes classification irrelevant
- All data must therefore be deleted immediately
Comments — 0
Sign in to comment