Information classification policy
Download this document free
Get this document with your free trial. Choose from the full Complyzard library.
Try 1 month free30 days free, then $19/month. Trial terms apply. Card required. Cancel anytime.Document information
For information owners and users to define classification criteria, labels, handling rules, review, declassification and correction of misclassified information.
- Document type
- Policy
- Format
- DOCX
- Pages
- 10
- Language
- English
- Version
- 1.0
- Updated
- 2026-09-15
- Category
- Information security
- Licence
- Internal use
Description
For information owners and users to define classification criteria, labels, handling rules, review, declassification and correction of misclassified information.
Contents
- Document control
- Purpose of this policy
- Define classification levels through handling decisions
- Classify information by consequence and binding conditions
- Map external restrictions to internal classification
- Classify information at creation, receipt, and assembly
- Set reviewable defaults and automation
- Classify derived and combined information
- Carry labels through systems and transfers
- Define handling rules for each classification level
- Resolve classification uncertainty without defaulting to the highest level
- Approve downgrade, declassification, and publication
- Correct overclassification and missing labels
- Related controls that use classification
- Test the scheme with boundary cases
Version history
- v1.015/09/2026