Hi All,
The National Cybersecurity Center of Excellence (NCCoE) has released a new draft project description, Data Classification Practices: Facilitating Data-Centric Security. Publication of this project description begins a process to further identify project requirements, scope, and hardware and software components for use in a laboratory environment.
We want your feedback on this draft to help refine the project. The comment period is now open and will close on June 21, 2021.
The first phase of this project will develop an approach for a data classification solution and will define basic terminology and concepts to provide a common language for discussing data classification. In the laboratory, the NCCoE will attempt a basic proof-of-concept implementation of limited data discovery, analysis, classification, and labeling capabilities, as well as a rudimentary method for expressing how data with a particular label should be handled for each use case scenario. This project will result in practice guides and other publications to encourage increased standardization and adoption of data classification methods.
We Want to Hear from You!
Review the project description and submit comments online on or before June 21, 2021. You can also help shape and contribute to this project by joining the NCCoE's Data Classification Community of Interest. Send an email to
[email protected] detailing your interest.
We value and welcome your input and look forward to your comments.
------------------------------
Michael Roza CPA, CISA, CIA, MBA, Exec MBA
------------------------------