Yesterday, 15 November 2023, the U.S. National Cybersecurity Center of Excellence (NCCoE) published the initial version of the U.S. National Institute of Standards and Technology (NIST) Internal Report on Data Classification Concepts and Considerations for Improving Data Protection. The public consultation is open until 9 January 2024. The report introduced the notion of data classification as a process of categorising an organisation’s data assets (info-based resource) by persistently labelling them to ensure their proper management. It aims to help companies enhance their data protection approach more efficiently. It provides suggestions in common use cases such as data sharing, compliance reporting & monitoring, zero-trust architecture and LLMs, etc.
Press release:
https://www.nist.gov/news-events/news/2023/11/open-public-comment-draft-nist-ir-8496-data-classificationFull text: https://nvlpubs.nist.gov/nistpubs/ir/2023/NIST.IR.8496.ipd.pdf