Data Classification Secure Cloud Adoption

This version has been archived. For the latest version of this document, visit: https://docs.aws.amazon.com/whitepapers/latest/data- classification/data-classification.html Data Classification Secure Cloud Adoption March 2020 This version has been archived. For the latest version of this document, visit: https://docs.aws.amazon.com/whitepapers/latest/data- classification/data-classification.html Notices Customers are responsible for making their own independent assessment of the information in this document. This document: (a) is for informational purposes only, (b) represents current AWS product offerings and practices, which are subject to change without notice, and (c) does not create any commitments or assurances from AWS and its affiliates, suppliers or licensors. AWS products or services are provided “as is” without warranties, representations, or conditions of any kind, whether express or implied. The responsibilities and liabilities of AWS to its customers are controlled by AWS agreements, and this document is not part of, nor does it modify, any agreement between AWS and its customers. © 2020 Amazon Web Services, Inc. or its affiliates. All rights reserved. This version has been archived. For the latest version of this document, visit: https://docs.aws.amazon.com/whitepapers/latest/data- classification/data-classification.html Contents This version has been archived. For the latest version of this document, visit: https://docs.aws.amazon.com/whitepapers/latest/data- classification/data-classification.html Abstract This paper provides insight into data classification categories for public and private organizations to consider when moving data to the cloud. It outlines a process through which customers can build data classification program, shares examples of data and the corresponding category it may fall into, and outlines practices and models currently implemented by global first movers and early adopters along with data classification and privacy considerations. It also examines how implementation of data classification program can simplify cloud adoption and management, and recommends that customers leverage internationally recognized standards and frameworks when developing their own data classification rules.