the organization should really create insurance policies for categorizing and classifying all data, it doesn't matter wherever it resides. insurance policies are needed to make certain suitable protections are in position though the data is at relaxation and when it’s accessed. S. and globally. NIST also submitted a report to the White House out