To avoid the risks and costs presented by multiple and inconsistent policies, an organization should establish a single, comprehensive Data Security Classification (DSC) policy – one that addresses all the applicable regulatory and business requirements and provides guidance for the management of all types of information, in all locations across the organization.
