Data Classification & Categorization Flashcards

What is the primary purpose of data classification in data stewardship?

Answer: To assign sensitivity levels and categories to data assets for proper handling

Data classification assigns sensitivity levels and categories to data assets so they can be protected, managed, and handled in accordance with governance policies.

Which classification level typically applies to data that can be freely shared with the general public?

Answer: Public

Public classification applies to data that can be disclosed without restrictions because its release poses no risk or harm to the organization.

What term describes a hierarchical arrangement of categories used to systematically organize data?

Answer: Data taxonomy

A data taxonomy is a hierarchical classification system that organizes data into structured categories and subcategories, similar to how biological species are classified.

In data sensitivity classification, what does PII stand for?

Answer: Personally Identifiable Information

PII stands for Personally Identifiable Information, which is any data that can be used to identify a specific individual, such as name, Social Security number, or email address.

Which approach to data classification uses automated scanning tools that inspect content and assign categories based on predefined patterns or keywords?

Answer: Content-based classification

Content-based classification uses automated tools to scan data content and apply category labels based on pattern matching, keywords, or regular expressions found within the data itself.

What is a data dictionary's primary function in the context of data classification?

Answer: A centralized repository documenting data elements, their definitions, and associated attributes

A data dictionary is a centralized repository that documents data elements, their definitions, formats, relationships, and metadata to support consistent data understanding and governance.

Which of the following best describes a sensitivity classification scheme in enterprise data governance?

Answer: A framework that assigns protection levels based on potential harm from unauthorized disclosure

A sensitivity classification scheme is a governance framework that assigns tiered protection levels (e.g., Public, Internal, Confidential, Restricted) based on the potential harm if data is improperly disclosed.