A city records clerk invents ad-hoc labels such as "super-secret-plus" that no other department recognizes. What should the information security program prefer for classification?
Select an answer to reveal the explanation.
Short Explanation
Think of street signs—if every block invents its own colors, drivers get lost. Classification works the same way: a short, shared set of labels tied to real impact beats clever one-off stamps nobody else understands. Keep the scheme simple enough that a clerk in Parks and a clerk in Courts mark the same kinds of harm the same way.
Full Explanation
Effective classification schemes use a limited number of categories with documented criteria—typically based on confidentiality, integrity, or availability impact—so staff can apply them consistently. Ad-hoc or overly granular labels create inconsistent handling and weaken control selection. Organization-wide definitions enable training, automation, and auditability across departments.