[USA] Data classification is first step in successful data protection / Search.Security.com, 10 May 2007
http://searchsecurity.techtarget.com/tip/0,289483,sid14_gci1252535,00.html
Tom Bowers
"The Federal Financial Institutions Examination Council (FFIEC) guidelines state that data classification must be an element of an enterprise's risk assessment process. Why does the FFIEC mandate data classification? Essentially to differentiate low-value from high-value information, and to mandate the correct security controls for each. A high-value data point obviously requires more stringent protection mechanisms."