TechKnowSurge
CompTIA Security+ 3.3 ISC2 CISSP 2.2 NIST NICE K0934
TechKnowSurge Catalog Interactives Does It Fit the Label?
InteractiveSecurityFree

Does It Fit the Label?

An internal report posted on social media, a confidential plan sent to the board: does the way it was shared fit its classification?

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

The Data Classifications lesson starts with Susan. She posted a report about the company's future products on social media, proud of the company. The report was not meant to leave the company, and it cost the company some of its competitive edge. She did nothing wrong on purpose: nobody had told her it was sensitive. Classification fixes that. The label on a piece of data tells everyone how it may be handled and to whom it may go. There is no official business scheme, but the lesson uses a common one with four levels: Public: may be disclosed freely, like a job ad on the website. Internal: unlikely to do much damage, but meant for communication inside the company, not outside it. Confidential: could hurt operations if released, so it is protected more tightly. In this set, that means it goes only to the people who work with it, not to the whole company. Restricted: could do serious damage if released, so it gets the tightest handling of all, again only for the people who need it. A quick test for each card: given its label, is this person, or this place, allowed to have it?

What you'll learn

Aligned to

CompTIA Security+
3.3 Compare and contrast concepts and strategies to protect data.
ISC2 CISSP
2.2 Establish information and asset handling requirements
NIST NICE
K0934 Knowledge of data classification policies and procedures

Key terms

Data Classification
The process of organizing and labeling data based on its sensitivity or confidentiality level to inform access and handling policies.
Confidentiality
The principle that information is accessible only to those authorized to access it.
Sensitive Data
Information that must be protected from unauthorized access due to its private, confidential, or regulated nature, such as customer records or proprietary business plans.

Topics

Data Classification Data Handling Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →