This document specifies requirements for information classification, marking and handling (ICMH). This document also defines how such information can be accessed by users, both inside and outside the organization, who own the information.

This document is applicable to, but not limited to, the following:

a)    organizations of any size that create, store, share or otherwise process information;

b)    individuals who create, store, share or otherwise process information;

c)    individuals with responsibilities for document management, information governance and management, information security, data protection, privacy and/or compliance; and

d)    organizations that create, provide or support tools that enable a) to c).

This document addresses information that can be understood by humans and is capable of being shared. Throughout this document such information is referred to as an “information asset” regardless of its media or format.

NOTE      Information assets can include structured information, unstructured information, text, pictures and audio/video recordings, i.e. anything that contains information, including information that is derived from databases and turned into a tangible asset.