Data Classification Assessment Questionnaire Form
Complete this Data Classification Assessment Questionnaire Form to review your organization's data classification practices and controls.
How many distinct data classification levels does your organization use?
*
2 (e.g., Public, Confidential)
3 (e.g., Public, Internal, Confidential)
4 or more
Not formally defined
How clearly are your data classification policies communicated to staff?
*
Not clear at all
1
2
3
4
Extremely clear
5
1 is Not clear at all, 5 is Extremely clear
Which of the following best describes your organization's approach to classifying new data assets?
*
Classification is assigned automatically by systems
Classification is assigned manually by data owners
Classification is rarely or never assigned
Other
Please rate your organization's effectiveness in enforcing data classification controls.
*
1
2
3
4
5
Data Types and Classification Matrix
*
Rows
Public
Internal
Confidential
Restricted
Customer Data
1
2
3
4
Employee Records
5
6
7
8
Financial Information
9
10
11
12
System Logs
13
14
15
16
How often does your organization review and update data classification assignments?
*
At least annually
Every 2-3 years
Rarely or never
Are data classification labels consistently applied in all systems?
*
Yes, always
Most of the time
Rarely
Not sure
How satisfied are you with the current data classification training provided to staff?
*
1
2
3
4
5
Please indicate your level of agreement with the following statements about data classification in your organization.
*
Rows
Strongly Disagree
Disagree
Neutral
Agree
Strongly Agree
Data classification is part of onboarding
17
18
19
20
21
Staff know how to classify data
22
23
24
25
26
Data classification is reviewed regularly
27
28
29
30
31
Please provide any additional comments or suggestions regarding data classification in your organization.
Submit Assessment
Should be Empty: