CISA: Certified Information Systems Auditor

A data inventory and classification exercise identifies sensitive data, its locations, and its protection requirements. That foundation is necessary before evaluating risks and workflows or designing DLP policies and templates. Microsoft’s DLP planning guidance similarly calls for identifying the sensitive information to protect before policy planning.