data-security-classification

Classify data assets into four sensitivity tiers and define handling controls.

3|3|Updated Mar 8, 2026

Search Tags:#compliance #data security #retention policy #data governance #data classification #handling controls

Ready to run

npx skills add https://github.com/jaskaranhundal/usap-skills --skill data-security-classification

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: data-security-classification
Source: https://github.com/jaskaranhundal/usap-skills/tree/main/identity-access/data-security-classification
Command: npx skills add https://github.com/jaskaranhundal/usap-skills --skill data-security-classification

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the critical need to understand and manage data sensitivity by automatically classifying data assets, defining appropriate handling controls, and ensuring compliance with retention policies.

Core Features & Use Cases

Data Classification: Assigns sensitivity levels (Public, Internal, Confidential, Restricted) to data assets.
Handling Controls Definition: Specifies security measures (encryption, access, transmission) based on classification.
Retention Policy Enforcement: Defines how long data should be kept and how it should be disposed of.
Use Case: Automatically classify customer PII found in a new database table, assign it 'Confidential' status, enforce AES-256 encryption, and set a 7-year retention period.

Quick Start

Use the data-security-classification skill to classify the data asset 'customer_database.csv' and suggest handling controls.

Frequently Asked Questions about data-security-classification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I classify data sensitivity levels for PII and PCI assets?▼

Data sensitivity classification assigns assets like PII and PCI to a 4-tier framework of Public, Internal, Confidential, and Restricted levels. This automatically defines appropriate handling controls and retention policies for compliance workflows.

What handling controls are required for confidential data assets?▼

Handling controls for confidential data assets specify security measures such as AES-256 encryption, access restrictions, and transmission protocols. These controls are defined based on the assigned data classification level to ensure proper data governance.

How do I establish retention policies for regulated data types like PHI?▼

Retention policies for regulated data types like PHI are established by defining specific retention periods, such as a 7-year duration, and outlining disposal methods. This enforces compliance within data governance and risk management workflows.

Does data classification handle cross-border transfer regulations?▼

Data classification handles cross-border transfer regulations by incorporating these considerations into the 4-tier sensitivity framework. This ensures data assets comply with international data governance and risk management requirements during transmission.

Can I use data classification for a new database table containing customer PII?▼

You can use data classification for a new database table containing customer PII to automatically assign Confidential status. It then enforces handling controls like AES-256 encryption and sets a 7-year retention period for compliance.

What is the best way to automate data governance and risk management for data assets?▼

Automating data governance and risk management for data assets is best achieved by classifying data sensitivity across a 4-tier framework. This defines handling controls and establishes retention policies to ensure compliance across various data types.