How to roll out a Data Classification programme

With a growing focus on the need for businesses to understand their data and protect it, the next step is to implement a data classification programme. But where do you start, and how should you get buy in from your staff?

Our data classification specialists have developed a six-step programme to help you achieve data classification success.

1. Classification audit

Review and analyse the current data protection policies and measures you have in place.

• What solutions are you using?
• What is driving your need for data classification?
• How much legacy data do you need to classify?

2. Technical discovery and policy Configuration

Understand the environment and identify the risks involved. Consider:

• Company culture
• Policy documentation
• Solutions on the market

Consider, how your classification policies should be enforced within the selected toolset and the technical and cultural impacts of these on your business. Consider how your classification toolset will be configured:

• What labels will you use?
• What type of data classification will you use?
• How will you integrate your legacy data?

Many companies bring in specialist advice at this early stage to use their experience of large scale data classification roll outs to make the whole process as seamless as possible and avoid any unpleasant surprises later on in the process.

3. Technical and Business Pilot

Thorough testing is essential when rolling out a new solution. This will help you ensure the platform has been designed, installed and configured correctly and works seamlessly with your downstream and upstream platforms.

4. Communications and awareness

How will you foster a culture of security awareness amongst your users? Develop plans to communicate the benefits of the process with your staff. Consider cultural and geographical implications and establish user documentation and support for the roll out process.

5. Training and education

Identifying the training needs and a training plan for user groups at each paygrade will help you achieve buy-in across the company.

6. Solution deployment

A phased roll out will help to make the process more manageable. Consider conducting a review at the end of each phase to identify what’s worked, what hasn’t, and any opportunities for improvement.

• What labels will you use?
• What type of data classification will you use?
• How will you integrate your legacy data?

Data Classification as an ongoing process

Data Classification roll out is an ongoing process. By monitoring your data and identifying risk opportunities you can close gaps in your data protection. Listening to staff will give you a view on the impact the policy is having on their daily lives. Your policy should evolve with time to reflect the feedback and other changes in your business.

Specialist support when you need it

If you need advice on implementing a data classification policy, it’s worth consulting with an independent specialist. Working with more than 500 clients in 25 different countries looking after data classification projects for 45% of the FTSE 100, HANDD’s team of experts are perfectly placed to advise you in:

• Data Classification audit
• Policy review
• Policy design
• Data Classification audit
• Implementation
• Communications across your company
• Training and education of your users and administrators.

And, as independent consultants, you can be confident that they’ll help you find the right Data Classification solution for you.