In this digitized world, Information Security has become an integral part of each and every organization. The Internet has become an indispensable part of life. A whole lot of Information about everything is available on the internet, which includes sensitive data like Personally Identifiable Information, Intellectual property, Payment Card Industry data etc. And it’s obvious that sensitive data are needed to be protected. An organization needs to classify its data according to its importance, decide the data that needs to be protected.