Free practice · ordering · hard

Practice

Order the complete data-handling path

Arrange the chapter's complete information-handling workflow.

Secure information lifecycle

Classification guides every later data-handling decision

  1. ClassifyIdentify sensitivity and policy
  2. MinimizeUse only what the purpose requires
  3. ProtectChoose approved storage and encryption
  4. ShareName recipients, access, and expiration
  5. RetainFollow the approved lifecycle
  6. RespondReport exposure without delay

Purpose, minimum necessary data, approved storage, specific recipients, retention, and incident reporting keep protection attached to the information.

Arrange in the correct order
  1. 1. Retain, return, archive, or dispose under the approved schedule
  2. 2. Monitor sharing, expiration, changes, and suspected exposure
  3. 3. Verify recipients and apply approved access and encryption
  4. 4. Limit fields, records, and copies to what is needed
  5. 5. Confirm the approved purpose and accountable owner
  6. 6. Classify the information and identify applicable policy