When classifying data sensitivity I generally run into a few standard categories such as:
- Public
- Internal
- Confidential
- Restricted
Which do generally cover the sensitivity levels but don't make it necessarily easier to categorize the data. I'm generally really struggling with how data sensitivity regards towards the accessibility of the data.
I can imagine plenty of scenario's where having access to certain data is not considered a problem when the data needs to gathered by physical access to a device, but would be a problem if the same data could be gathered easily over distance or in large numbers.
Currently I'm looking for a way to classify data taking these items into account, but can't find standardized ways to do this while I can not imagine this is a rare scenario.
Are there any proper ways to asses this problem or do I have to look towards custom matrixes linking base sensitivity against accessibility?