5.13 Labelling of Information

An appropriate set of procedures for information labelling should be developed and implemented by the information classification scheme adopted by the organisation.

This control continues the Classification of Information (5.12) control. While the Classification of Information helps the organisation to identify the right access to the relevant information at the required time, this control goes one step further and facilitates the ground to communicate classification of information and helps automation of information processing and management.

To better implement this control, the organisation will need to think about ways to easily recognise information by labelling them. The organisation should adopt a method to handle its information. For instance, it is using labelling techniques such as physical labels, headers, footers, watermarking, etc.