Many organizations have policies to protect information. However, before organization can provide an effective security for its information, it must classify information to determine the most effective and appropriate controls.

What is information classification and what determines how information is classified?

What does it mean when information is classified as confidential?

Protected Health Information (PHI) and Personally Identifiable Information (PII) are regulated by laws such as FERPA and HIPPA. What is PHI and PII and how should organizations manage these types of information to meet compliance?