The PRIMARY reason to properly classify information assets is to determine:
appropriate encryption strength using a risk-based approach.
the business impact if assets are compromised.
the appropriate protection based on sensitivity.
user access levels based on the need to know.
Submit