HOME / REQUIREMENTS /

Application owner and classification level

SA1: Server operators must be able to identify a responsible party, known as the business application owner, for each application on the server and the data classification level of the information that the application stores and processes.

See also: Level 2, Level 3, Level 4, 1, Servers A, Level 2, Level 3, Level 4

How to Comply

Ensure application owners are identified to you

Document the name, department, and role of the informed IT liaison (practice manager or service owner), contact information, and the data classification level. This should be stored in a secure local repository (such as Service Now) or a spreadsheet which is stored securely.