graphgrc

SCF - DCH-02 - Data & Asset Classification

Mechanisms exist to ensure data and assets are categorized in accordance with applicable statutory, regulatory and contractual requirements.

Mapped framework controls

ISO 27002

• A.5.12
• A.5.9

SOC 2

• C1.1
• CC2.1

Control questions

Does the organization ensure data and assets are categorized in accordance with applicable statutory, regulatory and contractual requirements?

This site is open source. Improve this page.