MIDASEC03-BP03 Identify source data and set data classifications
Discover and classify data at the source (for example, sensors, PLCs, MES, and ERP systems) to apply appropriate controls from ingestion onward.
Desired outcome: Data is classified and governed from the moment it enters the system, helping prevent downstream risk exposure.
Benefits of establishing this best practice: Improves control over high-risk data, simplifies pipeline security, and enhances lineage tracking and compliance auditing.
Level of risk exposed if this best practice is not established: Medium
Implementation guidance
Build data ingestion pipelines with tagging and classification integrated into the ingestion and cataloging layers.
Implementation steps
-
Identify all upstream data sources contributing to the system.
-
Use edge and gateway services to apply initial metadata or tags.
-
Ingest data into AWS using services like Amazon Kinesis, AWS IoT Core, or AWS IoT SiteWise with classification.
-
Catalog and tag datasets in AWS Glue or AWS Lake Formation.
Resources
