I almost had it....needed to watch 5 times, but i get the gist. So categorization is a subset of classification. PII is classified as "sensitive", and within this classification, is broken down into "high, med, med" category
Classification deals with keeping the data from those who should not see it. It is all about privacy. Categorization is about risk. We categorize data based on the cost to the business if the confidentiality, integrity, or availability is compromised.
I almost had it....needed to watch 5 times, but i get the gist. So categorization is a subset of classification. PII is classified as "sensitive", and within this classification, is broken down into "high, med, med" category
Classification deals with keeping the data from those who should not see it. It is all about privacy. Categorization is about risk. We categorize data based on the cost to the business if the confidentiality, integrity, or availability is compromised.