Labeling procedures should cover all formats of information and associated assets, reflecting how things are classified (5.12), with easily recognizable labels attached appropriately. Guidance should cover how the labels are placed, and where, based on media type. Procedures should also define cases for omission and handling where labeling is impossible. Metadata should be used to describe, govern, control, and search digital information based on the organization’s configuration and ICT infrastructure, with applicable added metadata from processing systems. Personnel should be trained, and results from systems with vulnerable or vital information should carry an appropriate label.
Conformance1
Tools for conforming to standards, goals and processes
