Every data asset, in the cloud or on-premises, has the classification scheme applied, applied at the point of creation and always on; technology analyzes content to assign or guide classification continuously and users can validate automatic results; classifications are set before data is ingested into the cloud and evidenced before new applications and data sets are integrated; rules set defaults for new elements and handle unclassified data; classification can be modified as data changes; and downstream governance and security solutions base decisions on classification for where data sits by jurisdiction, and for encryption, distribution, access, usage, storage, transport, sharing, archiving and destruction. Authorized users or services can inspect, assign or modify the classification of any data entity and list the classifications of its children.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.