Is there an implemented classification and categorization of information based on its importance within the organization?
Yes.
Do the regulations concerning processed information include: secure processing, storage, transmission, transport, destruction, and classification change?
Yes.
Are employees informed about the classification methods and information processing procedures mandated within the organization?
