Depending on the type of data, you will have to prepare a risk assessment and possibly a business contingency plan. The classification will also form the basis of input to the system management agreement.
The type of data is found by filling in the system classification template.
The classification may have the following outcomes:
Type A: A risk assessment and a business contingency plan are required.
Type B: A risk assessment is required, but not necessarily a business contingency plan.
Type C: A risk assessment and a business contingency plan are not necessarily required.