BS 10010:2017

Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Context of the organization
5 Leadership
6 Planning and system design
7 Support
8 Operation
9 Performance evaluation
10 Improvement
Annex A (informative) - Example Classification, Marking
        and Handling Schemes
Annex B (informative) - Examples and guidance when applying
        the ICMH System to Information Assets in different
        formats and/or media
Bibliography

Defines requirements for the creation, implementation, evaluation and improvement of Information Classification, Marking and Handling (ICMH) systems.

This British Standard specifies requirements for the creation, implementation, evaluation and improvement of Information Classification, Marking and Handling (ICMH) systems. It specifies requirements for classifying information, including defining how it may be accessed by users, both inside and outside the organization, that own the information. The intended users of this British Standard include, but are by no means limited to, the following: organizations of any size that create, store, process and/or share information; individuals who create, store, process and/or share information; individuals with responsibilities for records management, document management, information governance and management, information security, data protection and/or privacy; and organizations that create, provide or support tools that enable a) to c). The scope of this British Standard addresses information that is in a form that can be understood by humans and is capable of being shared. Throughout this British Standard such information is referred to as an ‘Information Asset’ regardless of its media or format. NOTE1 Information Assets can include structured information, unstructured information, text, pictures and audio recordings, i.e. anything that contains information. NOTE2 The content of databases do not as easily fit within the marking aspects of this British Standard. However, information in whatever form that is derived from a database and turned into a tangible asset is included within this British Standard, as is information that is not originally derived from a database.