Ascertaining the class of information involves categorizing and classifying information based on various criteria such as sensitivity, importance, or access levels. The classification of information is essential for proper handling, protection, and dissemination within an organization. Here are common classes of information and factors that may be considered in the classification process:

1. Sensitivity:
   • Public Information: Information that is intended for public disclosure and does not contain sensitive or confidential details.
   • Internal Use Only: Information meant for internal use within the organization but not considered highly sensitive.
   • Confidential: Sensitive information that requires protection from unauthorized access or disclosure.
   • Top Secret/Restricted: Highly classified information that is of utmost importance and requires the highest level of protection.
2. Importance or Criticality:
   • Critical Information: Information that is crucial for the organization’s operations, decision-making, or continuity.
   • Important but Non-Critical: Information that holds significance but may not directly impact critical functions.
3. Legal or Regulatory Requirements:
   • Regulatory Compliance: Information that must be handled in accordance with specific laws, regulations, or industry standards (e.g., personal data under data protection laws).
4. Access Levels:
   • Public Access: Information accessible to anyone, including the general public.
   • Internal Access: Access limited to employees and authorized personnel within the organization.
   • Restricted Access: Limited access to specific individuals or departments based on job roles and responsibilities.
   • Executive Access: Restricted to top-level executives and decision-makers.
5. Lifecycle Stage:
   • Draft or Working Documents: Information in the early stages of development, subject to change.
   • Finalized Documents: Completed and approved information ready for distribution or implementation.
6. Financial Impact:
   • High Financial Impact: Information that, if compromised, could result in significant financial losses.
   • Low Financial Impact: Information where financial consequences of compromise are minimal.
7. Data Classification Labels:
   • Labels (e.g., Public, Internal, Confidential): Clear labeling to indicate the sensitivity or access level of the information.
8. Intellectual Property:
   • Proprietary Information: Intellectual property, trade secrets, or confidential business strategies.
9. Personal Identifiable Information (PII):
   • PII: Information that can be used to identify individuals, requiring special protection and compliance with privacy regulations.
10. Technology and Infrastructure Dependencies:
    • Critical System Information: Information directly related to the organization’s critical systems and infrastructure.
11. Project or Departmental Classification:
    • Departmental Information: Information specific to a particular department or project.
12. Crisis or Emergency Information:
    • Emergency Response Information: Information crucial during crisis situations, including emergency response plans.
13. Time Sensitivity:
    • Real-time Information: Information requiring immediate attention or dissemination.
    • Non-Time-Sensitive Information: Information that can be processed or disseminated at a more relaxed pace.

Classifying information allows organizations to implement appropriate security measures, allocate resources efficiently, and control access based on the sensitivity and importance of the data. The specific classes and criteria used for information classification may vary among organizations depending on their unique needs, industry regulations, and risk assessments.