The Art of Deception: Controlling the Human Element of Security

by Kevin D. Mitnick

A data classification policy will help you to implement proper controls with respect to disclosing information. Without a data classification policy, all internal information must be considered confidential, unless otherwise specified.

data classification policy