<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
---
name: implementing-data-handling-training
description: >-
  Implement data handling training covering classification schemes, labeling
  procedures, encryption requirements, retention policies, disposal methods,
  and cross-border transfer rules aligned with NIST SP 800-60 and ISO 27002.
domain: cybersecurity
subdomain: security-awareness
tags:
  - data-handling
  - classification
  - encryption
  - retention
  - disposal
version: "1.0"
author: defconxt
license: AGPL-3.0
metadata:
  mitre-attack: []
---

# Implementing Data Handling Training

## Overview

Data handling training ensures every employee understands how to classify,
label, store, transmit, and dispose of organizational data appropriately. This
skill covers data classification scheme training, encryption awareness, clean
desk and clear screen policies, secure disposal procedures, and cross-border
data transfer awareness.

## Prerequisites

| Requirement | Install |
|---|---|
| Classification policy | Organizational data classification standard |
| DLP tooling | Microsoft Purview, Titus, or Boldon James |
| Standards | NIST SP 800-60, ISO 27002, GDPR Chapter V |

## Commands

| Command | Description |
|---|---|
| `node agent.js classify --scheme 4-tier --examples real-world` | Generate data classification training with examples |
| `node agent.js handling-rules --level confidential --medium email,usb,cloud` | Build handling rules matrix by classification level |
| `node agent.js disposal --method nist-800-88 --asset-types digital,physical` | Create secure disposal training materials |
| `node agent.js quiz --topics classification,handling,disposal --difficulty intermediate` | Generate assessment quiz for data handling competency |

## Workflow

### Step 1 — Assess Current State

Evaluate existing capabilities and identify gaps before implementing changes.

```bash
# Run assessment with agent tooling
node agent.js classify --scheme 4-tier --examples real-world
```

### Step 2 — Plan and Design

Define objectives, scope, timeline, and success criteria.

```bash
# Plan implementation
node agent.js handling-rules --level confidential --medium email,usb,cloud
```

### Step 3 — Execute and Deliver

Implement the planned activities and deliver outputs.

```bash
# Execute delivery
node agent.js disposal --method nist-800-88 --asset-types digital,physical
```

### Step 4 — Measure and Optimize

Track results against success criteria and iterate.

```bash
# Measure results
node agent.js quiz --topics classification,handling,disposal --difficulty intermediate
```

## Verification

- [ ] Prerequisites validated and tools installed
- [ ] Assessment of current state completed
- [ ] Implementation plan documented and approved
- [ ] Execution completed per plan
- [ ] Results measured against defined KPIs
- [ ] Findings documented and next steps identified
