Many businesses understand that their portfolio of information assets (data) will have different sensitivities and must be classified and handled appropriately. This Information Classification Policy template presents a generic approach suitable for most commercial organisations. Classifying data assets is an essential consideration for ISO 27001 certification.