Sekit CSF · Data Security · Policy
RCF-0091Data classification
Data is formally classified by sensitivity to determine appropriate protection
Mapping at a glance
RCF-0091Data classificationData Security · Policy
RCF-0091 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.12Classification of informationsupportsSekit's Data classification control defines the sensitivity tiers, such as public, internal and confidential, and the handling each requires, but the policy alone does not classify anything: applying those labels to real documents is a separate practice mapped on this page.A.5.13Labelling of informationsupportsThe classification policy facet sets the sensitivity tiers and handling rules that A.5.13's labels must reflect, one leg of the labelling requirement.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Data inventory and classification
The record of the personal and sensitive data the company holds, where it lives and how it is classified by sensitivity.
From the Sekit evidence catalog
This topic through the other lenses
All Data Security controls
Ask Sekura: “What evidence proves RCF-0091?”
Also via MCP, free with account