9.6.1 Classify media so the sensitivity of the data can be determined.
9.6.1 Verify that all media is classified so the sensitivity of the data can be determined.
It is important that media be identified such that its classification status can be easily discernible.
Media not identified as confidential may not be adequately protected or may be lost or stolen.
Note: This does not mean the media needs to have a “Confidential” label attached; the intent is that the organization has identified media that contains sensitive data so it can protect it.