Data Classification at a University of Ap-plied Sciences : Developing and Piloting Data Classification for Savonia University of Applied Sciences
Miettinen, Antti-Jussi (2025)
2025
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2025120332203
https://urn.fi/URN:NBN:fi:amk-2025120332203
Tiivistelmä
A data classification project was launched at Savonia University of Applied Sciences, with the aim of strengthening the organization's information security and making information management more efficient. The project's task was to design and implement a data classification process that is suitable for the university's operating environment and supports the fulfillment of data protection obligations.
The process was designed using recommendations from the higher education sector and internationally recognized standards. The development emphasized risk-basedness, clear responsibilities, and practical applicability as part of the organization's daily work. The key result of the process was a data classification model that defined the principles related to the processing, protection, and sharing of information. The technical implementation and piloting of the model were carried out in the Microsoft Purview environment.
The piloting results showed that the solution brought data classification into the everyday life of users, improved the functionality of information management, standardized processing practices, and increased information security awareness. In conclusion, it can be stated that a carefully designed and phased implementation of the data classification process supports effective information management and strengthens the organization's information security.
The process was designed using recommendations from the higher education sector and internationally recognized standards. The development emphasized risk-basedness, clear responsibilities, and practical applicability as part of the organization's daily work. The key result of the process was a data classification model that defined the principles related to the processing, protection, and sharing of information. The technical implementation and piloting of the model were carried out in the Microsoft Purview environment.
The piloting results showed that the solution brought data classification into the everyday life of users, improved the functionality of information management, standardized processing practices, and increased information security awareness. In conclusion, it can be stated that a carefully designed and phased implementation of the data classification process supports effective information management and strengthens the organization's information security.