In the present document, “data classification”, “data security classification”, and “data categorization” all mean the same thing, as opposed to other contexts in which “classification” more narrowly ...

The Federal Risk and Authorization Management Program (FedRAMP) may ultimately eliminate the need for an information security classification process specific to the U.S. Defense Department, according ...

One of the most important and overlooked parts of the cyber threat attribution process is identifying the threat actor’s objective. Threat researchers often look at the intended goal of an attack and ...

CIOs and IT directors working on any project that involves data in any way are always more likely to succeed when the organisation has a clear view of the data it holds. Increasingly, organisations ...