Download eBook (PDF) - Red Gate Software

2 – Data Classification and RolesThe following illustration shows the database schema for the HomeLendingdatabase. This schema is based upon the Uniform Residential LoanApplication, or commonly referenced as the Fannie Mae 1003 form, which isused for loan applications in the United States.Figure 2-1: Sample HomeLending Schema.The aforementioned database creation script will create tables that are notpresented in Figure 2-1. The relationships represented in this schema arespecific to the tables that are referenced in this book.Once the database creation script is executed you can use a data generator tool,such as Red-Gate's SQL Data Generator to populate the tables with artificialtest data.Defining Classes of SensitivityOur main goal in this study, when considering data classification, is to identifyand specify the sensitivity of our data. For example, is it data that is freely andpublicly available, or for internal use only, or is it classified information thatonly certain personnel should be allowed to access?While here we will restrict ourselves to classification based on data sensitivityonly, it's worth noting that such a data classification process will oftenincorporate further information regarding the management of sensitive data.For example, data classification can be used to manage the data in respect todata retention policies. Among the many regulations that were noted in the38