# SUS04-BP01 - Implement a data classification policy

Best practice: SUS04-BP01
Pillar: Sustainability
Source: https://wellarchitected.cloudvisor.eu/docs/sustainability/sus04-bp01.html

## Implementation Guidance

"Implement a data classification policy" creates control points that keep operations aligned with business policy, risk, and compliance obligations. Treat ownership, exception handling, and review cadence as first-class operational mechanisms.

For the question "How do you take advantage of data access and usage patterns to support your sustainability goals?", define measurable outcomes, assign owners, and review execution regularly. Integrate this practice into delivery and operations processes so improvements persist as workloads and requirements evolve.

### Key Steps

1. **Establish policy and control model**:
   - Define policies and standards that govern "Implement a data classification policy"
   - Map control ownership and review cadence across teams
   - Set exception handling and approval workflows

2. **Implement controls in delivery and operations**:
   - Embed checks into deployment pipelines and operational processes
   - Use audit evidence and tracking to prove control effectiveness
   - Escalate policy violations through predefined response paths

3. **Review, audit, and improve**:
   - Measure compliance drift and operational outcomes regularly
   - Resolve control gaps with prioritized remediation actions
   - Update governance artifacts as architecture and risk change

## Risk / Impact

**Level of risk if not implemented**: High

**Impact**: If this best practice is missing, teams are more likely to experience preventable incidents, delayed recovery, and inconsistent change outcomes. Control gaps and weak visibility can increase customer impact during high-pressure events.

**Benefits of implementation**:
- Reduced operational risk through repeatable controls
- Faster detection and response during incidents
- Stronger auditability and decision traceability

## AWS Services to Consider

<div class="aws-service">
  <div class="aws-service-content">
    <h4>Amazon S3</h4>
    <p>Delivers durable object storage with lifecycle controls for efficient data management.</p>
  </div>
</div>

<div class="aws-service">
  <div class="aws-service-content">
    <h4>AWS Glue</h4>
    <p>Automates data cataloging and ETL workflows for efficient data processing.</p>
  </div>
</div>

<div class="aws-service">
  <div class="aws-service-content">
    <h4>Amazon Athena</h4>
    <p>Queries data in S3 with serverless SQL for analytics and reporting.</p>
  </div>
</div>

<div class="aws-service">
  <div class="aws-service-content">
    <h4>Amazon EMR</h4>
    <p>Runs scalable big data processing frameworks for batch and streaming workloads.</p>
  </div>
</div>

## Related Resources

<div class="related-resources">
  <h2>Related Resources</h2>
  <ul>
    <li><a href="https://docs.aws.amazon.com/wellarchitected/latest/framework/sus-04.html">SUS04: How do you take advantage of data access and usage patterns to support your sustainability goals?</a></li>
    <li><a href="https://docs.aws.amazon.com/wellarchitected/latest/sustainability-pillar/welcome.html">AWS Well-Architected Framework - Sustainability Pillar</a></li>
    <li><a href="https://docs.aws.amazon.com/wellarchitected/latest/sustainability-pillar/design-principles.html">Sustainability Design Principles</a></li>
  </ul>
</div>