An organization is recovering data following a datacenter outage and determines that backup copies of files
containing personal information were stored in an unsecure location, because the sensitivity was unknown.
Which of the following activities should occur to prevent this in the future?
Business continuity planning
Information classification is done by confidentiality and comprises of three categories, namely: public use,
internal use and restricted use. Knowing how to apply these categories and matching it up with the appropriate
data handling will address the situation of the data ‘unknown sensitivity’