One of the best practices is to classify your data, which provides a way to categorize and handle organizational data based on levels of sensitivity. According to data sensitivity, you can plan data protection, data encryption, and data access requirements.
By managing data classification as per your system's workload requirements, you can create the data controls and level of access needed for the data. For example, content such as a user rating and review is often public, and it's fine to provide public access, but user credit card information is highly sensitive data that needs to be encrypted and put under very restricted access.
At a high level, you can classify data into the following categories:
- Restricted data: This contains information that could harm the customer directly if it got compromised. Mishandling of restricted data can damage a company's reputation and impact a business adversely. Restricted data may include customer Personally Identifiable...