CISA: Certified Information Systems Auditor

Data classification depends on the sensitivity and business impact of data compromise. Risk assessment results identify those risks and impacts, allowing the data owner to assign an appropriate classification and corresponding handling requirements.