DSP-03: Is a data inventory created and maintained for sensitive and personal information
(at a minimum)?
The data inventory should provide visibility into the location, volume, and context of all sensitive data and PII through data discovery activities that result in a data inventory. Continuously support the classification process using discovery.
Control implemented
Control ownership
Description
Create and maintain a data inventory, at least for any sensitive
data and personal data.