ID.AM-07:
Inventories of data and corresponding metadata for designated data types are maintained
Implementation Examples
Ex1:
Maintain a list of the designated data types of interest (e.g., personally identifiable information, protected health information, financial account numbers, organization intellectual property, operational technology data)
Ex2:
Continuously discover and analyze ad hoc data to identify new instances of designated data types
Ex3:
Assign data classifications to designated data types through tags or labels
Ex4:
Track the provenance, data owner, and geolocation of each instance of designated data types