ISO/IEC TS 38505-3:2021 PDF

Name: ISO/IEC TS 38505-3:2021 — Information technology — Governance of data — Part 3: Guidelines for data classification
SKU: ISO/IEC TS 38505-3:2021
Price: 25 EUR
Availability: InStock

Information technology — Governance of data — Part 3: Guidelines for data classification

Название (английский):

ISO/IEC TS 38505-3:2021

Information technology — Governance of data — Part 3: Guidelines for data classification

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 17
Дата публикации:: 20 декабря 2021 г.
Издание:: ISO/IEC TS 38505 edition 1 version 1
ICS:: 35.020

Тип поставки:

Full version255 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:3 раб. дн. (перевод)

Цена:255 €

Описание (английский):

This document provides essential guidance for members of governing bodies of organizations and management on the use of data classification as a means to support the organization’s overall data governance policy and associated systems. It sets out important factors to be considered in developing and deploying a data classification system.

Abstract

Похожие стандарты

Стандарты, упомянутые в описании

Overview

ISO/IEC TS 38505-3:2021 - Information technology - Governance of data - Part 3: Guidelines for data classification - is a Technical Specification that provides practical guidance for governing bodies and management on using data classification to support an organization’s data governance policy. It complements ISO/IEC 38500 (IT governance) and ISO/IEC 38505-1 (data governance) and focuses on factors to consider when developing, deploying and maintaining a data classification system to manage value, sensitivity and risk.

Key topics and requirements

Foundations and context

The strategic value of data, the “data deluge,” associated risks and consequences of failure.
Definitions for terms such as big data, customer data, data controller/processor, data steward, data sensitivity and PII.

Roles and responsibilities

Guidance for the governing body (oversight, direction, monitoring).
Guidance for management (scope, implementation, operations, reporting).
Operational roles: data stewards, data quality owners, controllers and processors.

Data classification framework

Phases: Context → Identification → Implementation → Monitor/Improve.
Emphasis on scoping, discovery, attribution and lifecycle considerations.

Guiding principles

Simplicity, default classifications, interoperability and equivalence.
Use of classification for controllers/processors, auditing, controls, compliance, customer data handling, assessment and continuous improvement.

Practical controls

Apply proportionate protections aligned with sensitivity and business needs.
Emphasize monitoring, reporting and continuous improvement rather than prescriptive technical controls.

Applications and users

ISO/IEC TS 38505-3 is designed for:

Members of governing bodies and senior management setting data policies and risk appetite.

Data governance teams, data stewards and data quality owners implementing classification schemes.

Compliance, privacy and information security officers aligning classification with PII/data protection obligations.

IT and business managers integrating classification into systems, access controls and data lifecycle processes. Practical applications include designing a classification taxonomy, setting default classes, mapping controls to sensitivity, supporting legal and regulatory compliance, and improving data discovery and protection workflows.

Related standards

Keywords: ISO/IEC TS 38505-3:2021, data classification, data governance, data sensitivity, data taxonomy, information security, data protection, governance of data.

ISO/IEC TS 38505-3:2021 PDF

Abstract

Похожие стандарты

Overview

Key topics and requirements

Applications and users

Related standards

Технические детали

ISO/IEC 38505-1:2017

Information technology — Governance of IT — Governance of data — Part 1: Application of ISO/IEC 38500 to the…

ISO/IEC TR 38505-2:2018

Information technology — Governance of IT — Governance of data — Part 2: Implications of ISO/IEC 38505-1 for…

ISO/IEC 20546:2019

Information technology — Big data — Overview and vocabulary

BS ISO 10667-1:2011

Assessment service delivery. Procedures and methods to assess people in work and organizational settings - Re…

PD ISO/TR 14872:2019

Health informatics. Identification of medicinal products. Core principles for maintenance of identifiers and…

ISO/IEC 19944-1:2020

Cloud computing and distributed platforms ─ Data flow, data categories and data use — Part 1: Fundamentals