Determining the current state of data protection for customer restricted access based on both internal guiding documents (such as the commercial secrecy regulation) and legal requirements. Analysing the lifecycle of restricted access data, the likelihood of its leakage and the level of protection. Determining the value of restricted access data based on a matrix classification methodology. Developing a data classification system considering the specifics of the customer's structure and business processes.

Analysis of business processes and associated flows of classified data between the customer's information systems. Definition of rules for the creation, (co-) storage, processing and transmission of classified data. Definition of user access rules to classified data, taking into account the specifics of all necessary customer attributes (business process, organisational structure, business specifics, etc.). Development of a 'Classified Data Management Model'.

Selection (recommendations) of tools, implementation (deployment) of a classified data management system taking into account the client's specific requirements. Development of regulations for handling classified data and necessary instructions. Maintenance and support of the classified data management system during operation.