scope:

This document specifies organizational requirements for the management of Information Classification, Marking and Handling (ICMH). It specifies requirements for classifying information, including defining how it may be accessed by users, both inside and outside the organization, that own the information.

The intended users of this document include, but are not limited to, the following:

a) organizations of any size that create, store, share or otherwise process information;

b) individuals who create, store, share or otherwise process information;

c) individuals with responsibilities for document management, information governance and management, information security, data protection, privacy and/or compliance; and

d) organizations that create, provide or support tools that enable a) to c).

The scope of this document addresses information that can be understood by humans and is capable of being shared. Throughout this document such information is referred to as an 'information asset' regardless of its media or format.

NOTE1 Information assets can include structured information, unstructured information, text, pictures and audio/video recordings, i.e. anything that contains information, including information that is derived from databases and turned into a tangible asset.