Implements Annex A.5.9 (Inventory of information and other associated
assets) and A.5.12–A.5.13 (classification and labelling of information).
| Page | Purpose | Status |
|---|---|---|
| Inventory | Register of information assets, owners, and classification | Draft (pve03 first detail page in place) |
| Data classification (planned) | Classification scheme and handling rules | — |
| Class | Examples | Handling |
|---|---|---|
| Public | Marketing site, published policies | No restriction |
| Internal | Most wiki content, internal procedures | Staff only |
| Confidential | Customer data, customer credentials, backup contents | Need-to-know, encrypted at rest and in transit |
| Secret | Master keys, root credentials, customer encryption keys | Vaulted, MFA-gated, two-person handling |
The full scheme — including labelling and disposal rules — lives in
Data Classification (planned).