I have seen companies with 5. Along the lines of: 1. Public: Public information 2. Internal Use: Confidential business information 3. Confidential: Information

I have seen companies with 5. Along the lines of: 1. Public: Public information 2. Internal Use: Confidential business information 3. Confidential: Information that customers consider confidential 4. Sensitive: Personal and Private Information (PII), information that THE LAW considers confidential 5. Highly Sensitive: Encryption keys, server secrets, staff/admin passwords This list is from a blog I wrote at https://rietta.com/blog/commercial-information-classifications/ https://rietta.com/blog/commercial-information-classificatio.... It was adapted from something I originally saw while a student at Georgia Tech. I've consulted with companies that separately developed a substantially similar 5 point list.