Items of information which either individually or grouped together in some way, represent knowledge of something.

Data are the heart that allows an organisation to provide its services. In a certain way they are an abstract asset which will be stored in equipment or information media (normally grouped together in the form of databases) or will be transferred from one place to another by data transmission media.

In an analysis of risks and impacts, the user is normally limited to valuing the data, the other assets being simply servants that must take care of and protect the data entrusted to them.

    [vr] vital records (1)

    [com] data of commercial interest (2)

    [adm] data of administrative interest

    [source] source code

    [exe] object code

    [conf] configuration data

    [log] log

    [test] test data

    [per] personal data (3)

      [A] high level

      [M] medium level

      [B] basic level

    [label] classified data (4)

      [S] top secret

      [R] secret

      [C] confidential

      [DL] restricted

      [SC] unclassified

1.   Said to be those that are essential for the survival of the organisation, that is, those the lack of which or damage to will directly affect the organisation’s existence. It is possible to identify those that are essential for the organisation to survive an emergency situation, those that allow critical missions to be carried out or reconstructed, and those that affect the organisation’s legal nature or financial rights or those of its users.

2.   Said to be those that are of value for providing the services of the organisation itself.

3.   Said to be any information concerning physical persons who are identified or can be identified. Personal data are regulated by laws and regulations regarding public liberty and fundamental rights of physical persons and especially their honour and personal and family privacy.

4.   Said to be those subjected to specific regulations to control access and distribution, that is, those whose confidentiality is especially important. The classifications into which the data may be classified and the standards for their handling, are determined by the sector regulations, by agreements between the organisations or by internal standards.