5 - Inventory of data should be compiled and maintained
Purpose:
Support from leadership helps motivate all to care about security
Best Practices:
Allocate and document budget for security.
6 - Data classification based on sensitivity should be performed
Purpose:
Proper data classification helps prioritize the security of highly sensitive data.
Best Practices:
Encrypt the highly sensitive data.