ASSOCIATED DRATA CONTROL
This test is part of the Data Classification control that ensures your company has established a data classification policy in order to identify the types of confidential information possessed by the entity and types of protection that are required.
WHAT TO DO IF A TEST FAILS
If Drata finds that a Data Classification policy either does not exist or has not been approved within the last 12 months the test will fail.
To remediate a failed test, you will need to either upload or build a Data Classification policy within Drata or notify the owner to click 'Approve Policy' as soon as possible.
HELPFUL RESOURCES