The health service of a county have content scattered across different environments in different software versions. Users are confused of which application to use for what content and try their best based on advice from colleagues and access rights. This has led to a situation where content is stored on places it shouldn't be. At worst sensitive content is stored in places where everyone with domain access have read permission. Thankfully the implementation of search is poorly done which means that content are hidden in a "I can't see the forest since all the trees are in the way"-fashion.
There is a need to create a thorough plan that address legal concerns. Especially data on patients need to be identified, classified and moved to a new storage location. Legal have several aspects such as
- Person identification (Social security number)
- Patient records
- Malpractice reporting obligation
- Anonymous records in research projects
- Authorization management
- Information retrieval records
- ...
It's a quite difficult environment to classify content only using the basic two-dimensional spread sheet. Here we have four or five facets of the content that are to be classified, and there is a need to get a clear picture of what goes where and why. How do I classify multiple facets of content in a presentable form?