Data Protection & Classification Baseline

The set of essential controls that should be present to protect enterprise data: data classification and inventory, data minimization, encryption at rest/in transit and key management, DLP (email/endpoint/cloud), removable media and SaaS sharing control, least privilege data access, and a retention/disposal policy. The framework is SANS CIS Controls v8 Control 3; it is the technical foundation of KVKK/GDPR compliance.