U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Project Description (Initial Public Draft)

Data Classification Practices: Facilitating Data-Centric Security Management

Date Published: May 2021
Comments Due: June 21, 2021 (public comment period is CLOSED)
Email Questions to: data-nccoe@nist.gov


Karen Scarfone (Scarfone Cybersecurity), Murugiah Souppaya (NIST)


The National Cybersecurity Center of Excellence (NCCoE) has released a new draft project description, Data Classification Practices: Facilitating Data-Centric Security. This begins a process to further identify project requirements, scope, and hardware and software components for use in a laboratory environment. 
The NCCoE will solicit participation from industry to develop an approach for defining data classifications and data handling rulesets and for communicating them to others. In addition, this project will attempt a basic proof-of-concept implementation that will include limited data discovery, analysis, classification, and labeling capabilities, as well as a rudimentary method for expressing how data with a particular label should be handled for each use case scenario. This project will result in practice guides and other publications to encourage increased standardization and adoption of data classification methods.
Besides providing public comments on the draft, you can join the Community of Interest by sending an email to data-nccoe@nist.gov



data-centric security management; data classification; data labeling; data protection; zero trust architecture; zero trust security
Control Families

None selected


Draft Project Description (pdf)

Supplemental Material:
Submit comments
Project homepage

Document History:
05/19/21: Project Description (Draft)
07/22/21: Project Description (Final)


Security and Privacy

general security & privacy, zero trust