CIS Control 03: Data Protection
At the heart of a strong data management plan is awareness surrounding the 'Five Ws' of the enterprise's data: A comprehensive data management plan incorporates the answers to these questions with policy decisions and incident response procedures. Knowing what data an enterprise produces or consumes, as well as being able to classify it based on sensitivity, are the keystones of such a plan.