Free practice · ordering · medium

Practice

Order a secure sharing decision

Arrange the checks before sharing workplace information.

Secure information lifecycle

Classification guides every later data-handling decision

  1. ClassifyIdentify sensitivity and policy
  2. MinimizeUse only what the purpose requires
  3. ProtectChoose approved storage and encryption
  4. ShareName recipients, access, and expiration
  5. RetainFollow the approved lifecycle
  6. RespondReport exposure without delay

Purpose, minimum necessary data, approved storage, specific recipients, retention, and incident reporting keep protection attached to the information.

Arrange in the correct order
  1. 1. Review the final share and record ownership or removal date
  2. 2. Choose approved storage, access, encryption, and expiration
  3. 3. Verify each recipient and need to know
  4. 4. Confirm the approved purpose and minimum necessary fields
  5. 5. Classify the information under current policy