Business Use
Policy Owner: Sarah Ackerman Scope: Global
Policy Approver: Vittorio Cretella Approval Date: May 1, 2020
Policy Contact: Sarah Ackerman Effective Date: July 1, 2020
Information Asset Classification Policy
Intent
The intent of the Information Asset Classification Policy (the “Policy”) is to establish employee responsibilities for
processing information, including Personal Data, in line with its business value and legal and regulatory
requirements.
This Policy applies to all employees who are storing, transmitting, processing, or otherwise managing information
no matter the physical or digital form of the information or where it is stored.
Policy Requirements
P&G requires that an information classification framework (scheme) be established that applies throughout The
Company, based on the confidentiality requirements of the information. This classification framework must be
supported by standards and guidelines for appropriate protection and handling of information assets in line with
their classification.
Business Information Security Leaders (BISLs) must ensure that information assets that are owned or utilized by
their Business Unit/SMO/Sector/Function/Organization are classified and added to the Information Asset
Classification Catalog.
All employees are responsible for understanding the type of information they handle and ensuring the information
is classified, labeled, handled and protected appropriately.
References
• Information Asset Classification Framework Standard
• Information Asset End User Handling and Protection Standard
• Information Assets Labelling Guideline
• Secure Workspace Standard
Violating this Policy may result in disciplinary action, consistent with local laws, up to and including termination. Page 1 of 1
Employees affected by this Policy are expected to read and follow it, directing any questions to the Policy Contact.
