the corporation should build policies for categorizing and classifying all data, it does not matter exactly where it resides. guidelines are necessary to make certain acceptable protections are in position when the data is at relaxation and when it’s accessed. Data at relaxation is data that doesn't transfer from product to unit or network to ne