Establish and maintain an overall data classification scheme for the enterprise. Enterprises may use labels, such as �Sensitive,� �Confidential,� and �Public,� and classify their data according to those labels. Review and update the classification scheme annually, or when significant enterprise changes occur that could impact this Safeguard.