the organization must make policies for categorizing and classifying all data, no matter wherever it resides. procedures are required to make certain that appropriate protections are in place when the data is at https://aistudio.ml