{"product_id":"informationsklassning-informationsinventering-2026-2027-excel-word-pdf","title":"Information Classification \u0026 Information Inventory 2026\/2027 – Excel, Word \u0026 PDF","description":"\u003csection class=\"mb-product-content\" lang=\"en\"\u003e\n\u003cp\u003e\u003cstrong\u003eInformation Classification \u0026amp; Information Inventory 2026\/2027\u003c\/strong\u003e is an editable document package for companies, associations, and organizations that want to gain control over their information assets. Map information sets, document information owners, assess consequences of lacking \u003cstrong\u003econfidentiality, integrity, and availability (CIA)\u003c\/strong\u003e, decide on protective measures, and follow up on implementation. You receive an Excel register with a dashboard and six supplementary Word\/PDF documents.\u003c\/p\u003e\n\n\u003cnav aria-label=\"About the document template\"\u003e\u003cp\u003e\u003cstrong\u003eAbout the document template:\u003c\/strong\u003e \u003ca href=\"#mb-ingar\"\u003ePackage contents\u003c\/a\u003e · \u003ca href=\"#mb-excel\"\u003eExcel\u003c\/a\u003e · \u003ca href=\"#mb-klassning\"\u003eCIA classification\u003c\/a\u003e · \u003ca href=\"#mb-steg\"\u003eStep by step\u003c\/a\u003e · \u003ca href=\"#mb-regler\"\u003eLegal and limitations\u003c\/a\u003e · \u003ca href=\"#mb-faq\"\u003eFAQ\u003c\/a\u003e · \u003ca href=\"#mb-kallor\"\u003eSources\u003c\/a\u003e\u003c\/p\u003e\u003c\/nav\u003e\n\u003caside style=\"border-left:4px solid #247749;background:#E7F3E9;border-radius:7px;padding:16px;margin:12px 0\"\u003e\u003cstrong\u003eSource and technically reviewed: October 12, 2026.\u003c\/strong\u003e Version 1.0 for 2026\/2027. The 0–3 classification model in the package is \u003cstrong\u003ean editable example\u003c\/strong\u003e, not a generally prescribed scale or an official government form. It must be adapted to the organization's own requirements, local consequence definitions, and applicable law. No independent legal or certification review is included.\u003c\/aside\u003e\n\u003ch2 id=\"mb-ingar\"\u003eIncluded in the package\u003c\/h2\u003e\n\n\u003ctable\u003e\n\n\u003cthead\u003e\u003ctr\u003e\n\n\u003cth\u003eFile\u003c\/th\u003e\n\n\u003cth\u003ePurpose and content\u003c\/th\u003e\n\n\u003cth\u003eFormat\u003c\/th\u003e\n\n\n\u003c\/tr\u003e\u003c\/thead\u003e\n\n\u003ctbody\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eInformation Classification Register \u0026amp; dashboard\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eEight sheets for information sets, classification assessments, protective measures, decisions, example model, instructions, and a separate demonstration sheet.\u003c\/td\u003e\n\n\u003ctd\u003eExcel (XLSX)\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eInformation Classification Protocol\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eInformation owner, consequences of failures in C, I, and A, justification, decision, signatures, and reassessment.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eClassification Model \u0026amp; Consequence Scale\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eEditable example model with four consequence levels 0–3, as well as separate criteria for CIA.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eProtective Measures \u0026amp; Decision Protocol\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eProposed controls, measure owners, evidence reference, residual risk, approval, and verification.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eInventory \u0026amp; Reassessment Checklist\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eVerification of ownership, information assets, classification justifications, specific regulatory frameworks, and follow-up.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eDetailed User Guide\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eSwedish step-by-step guide for implementation, registry, decision-making, personal data, risk assessment, and archiving.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\u003ctr\u003e\n\n\u003ctd\u003e\u003cstrong\u003eInformation Classification – Working Reference\u003c\/strong\u003e\u003c\/td\u003e\n\n\u003ctd\u003eEnglish working reference for Swedish operations, including C\/I\/A, consequence levels, and approval fields.\u003c\/td\u003e\n\n\u003ctd\u003eWord (DOCX) + PDF\u003c\/td\u003e\n\n\n\u003c\/tr\u003e\n\n\n\u003c\/tbody\u003e\n\n\n\u003c\/table\u003e\n\n\u003cp\u003e\u003cstrong\u003eTotal 13 delivery files:\u003c\/strong\u003e 6 editable DOCX, 6 searchable PDFs in A4, and one Excel workbook. The ZIP file contains only finished delivery documents. Excel requires no macros.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-excel\"\u003eExcel tools for information classification and follow-up\u003c\/h2\u003e\n\n\u003cul\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eOverview:\u003c\/strong\u003e dynamic counters for information assets, approved assessments, completion needs, highest indicator, and open\/overdue protective measures.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eInformation Sets:\u003c\/strong\u003e 150 register slots with unique information IDs, business process, system reference, owner, personal data indicator, and reassessment date.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eClassification Assessments:\u003c\/strong\u003e 200 slots for the three CIA dimensions, separate numerical consequence values, justification, assessor, decision, and control fields.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eProtective Measures:\u003c\/strong\u003e 150 entries with measure, owner, internal deadline, actual verification, evidence reference, and status.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eDecisions \u0026amp; Follow-up:\u003c\/strong\u003e 100 decision slots with decision-maker, date, references, and risk-based reassessment date.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eClassification Model:\u003c\/strong\u003e suggested levels 0 negligible, 1 limited, 2 significant, 3 severe. These values must not be confused with SKR KLASSA's own system.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eInstruction and Examples:\u003c\/strong\u003e built-in methodology and three fictional examples that are kept separate from the actual registers and dashboard.\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\n\u003cp\u003eA formula displays the highest of the three registered CIA levels as an \u003cstrong\u003eindicator\u003c\/strong\u003e. It is not an automated protection decision. Only authorized information owners and reviewers can assess actual consequences, risks, compliance, and the effectiveness of controls.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-klassning\"\u003eWhat does information classification according to CIA mean?\u003c\/h2\u003e\n\n\u003cp\u003eInformation classification is used to identify the protection required based on the consequences if \u003cstrong\u003econfidentiality\u003c\/strong\u003e (protection against unauthorized disclosure), \u003cstrong\u003eintegrity\u003c\/strong\u003e (correct and unaltered information), or \u003cstrong\u003eavailability\u003c\/strong\u003e (timely access) fail. The Swedish Civil Contingencies Agency (MSB) methodology support describes classification as a foundation for selecting security measures and ensuring uniform handling of an organization's information. Digg also uses CIA for risk-based management of information that is shared and made available.\u003c\/p\u003e\n\n\u003cp\u003eAssess each information set with documented consequences for affected individuals, business, and third parties. Different organizations may require different consequence scales. The package's 0–3 scale is illustrative and does not contain any official special security protection classes.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-steg\"\u003eHow to use the information classification template\u003c\/h2\u003e\n\n\u003col\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eDefine scope:\u003c\/strong\u003e select processes, information sets, and those responsible. Do not register secret content or passwords in Excel.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eDecide on a local classification model:\u003c\/strong\u003e use the editable 0–3 model as a proposal or replace it with the organization's decided scale.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eInventory information assets:\u003c\/strong\u003e register information ID, name, process, information owner, system connections, and special requirements.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eAssess C, I, and A:\u003c\/strong\u003e document the consequences in each dimension and provide factual justifications.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eConduct risk analysis and decide on protection:\u003c\/strong\u003e identify needs for access control, encryption, logging, backup, restoration, and other measures.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eDocument approval and evidence:\u003c\/strong\u003e enter the responsible party, decision, references, actual controls, and, if necessary, residual risk.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003eFollow up and reassess:\u003c\/strong\u003e use the dashboard to find open assessments and internal deadlines, especially when information flows or systems change.\u003c\/li\u003e\n\n\/ol\u0026gt;\n\u003ch2 id=\"mb-regler\"\u003eGDPR, cybersecurity, and important legal limitations\u003c\/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eGDPR:\u003c\/strong\u003e For personal data, Article 32 requires risk-adjusted technical and organizational security measures. Classification is a possible basis for identifying protection needs, but a completed template does not automatically satisfy GDPR and does not replace a Data Protection Impact Assessment (DPIA) where required.\u003c\/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eCybersecurity regulations and sector requirements:\u003c\/strong\u003e For organizations covered by the Cybersecurity Act or other specific regulations, additional requirements may apply. Authorities, healthcare providers, and security-sensitive organizations must use relevant regulations, agreements, and processes. The document package is not an ISO 27001 certification or a complete security protection analysis.\u003c\/p\u003e\n\n\u003caside style=\"background:#FFF3D8;border-left:4px solid #C18D2A;border-radius:7px;padding:16px\"\u003e\u003cstrong\u003eImportant limitation:\u003c\/strong\u003e Excel does not automatically retrieve information assets from IT systems, classify content, implement security measures, send reminders, or certify that a control has been performed. The register contains no built-in encryption from Mallbutiken. Always protect the files with the organization's storage and authorization routines.\u003c\/aside\u003e\n\u003ch2\u003eWho is this product for?\u003c\/h2\u003e\n\n\u003cp\u003eSmall businesses, IT and security managers, finance departments, system owners, associations, consultancy firms, project managers, and organizations that want to introduce an understandable, documentable, and traceable first level of information inventory and consequence assessment. Particularly suitable as an administrative complement to access auditing, risk management, and data protection work.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-faq\"\u003eFrequently Asked Questions\u003c\/h2\u003e\n\n\u003ch3\u003eIs the information classification template the same as KLASSA?\u003c\/h3\u003e\n\n\u003cp\u003eNo. SKR KLASSA has its own model. The Mallbutiken levels 0–3 are an independent example and should not be wrongly equated with KLASSA's consequence levels.\u003c\/p\u003e\n\n\u003ch3\u003eCan I inventory both digital and physical information?\u003c\/h3\u003e\n\n\u003cp\u003eYes. Information sets can relate to both digital and physical handling. However, the specific practical security assessment needs to be adapted to the form of the information.\u003c\/p\u003e\n\n\u003ch3\u003eHow many entries fit?\u003c\/h3\u003e\n\n\u003cp\u003e150 information sets, 200 classification assessments, 150 protective measures, and 100 decision\/follow-up slots are prepared.\u003c\/p\u003e\n\n\u003ch3\u003eDoes Excel automatically calculate a protection class?\u003c\/h3\u003e\n\n\u003cp\u003eNo. It displays the highest registered CIA dimension as an indicative prioritization signal. Actual protection class, risk, and measures require human judgment.\u003c\/p\u003e\n\n\u003ch3\u003eDoes the template meet GDPR or NIS2?\u003c\/h3\u003e\n\n\u003cp\u003eIt can assist with documentation within a systematic security framework, but it is not a guarantee of legal compliance and does not replace applicable legal controls.\u003c\/p\u003e\n\n\u003ch3\u003eDo I get automatic notifications about reassessment?\u003c\/h3\u003e\n\n\u003cp\u003eNo. Excel shows status and internal monitoring signals when formulas are calculated. No emails or SMS are sent.\u003c\/p\u003e\n\n\u003ch3\u003eAre English documents included?\u003c\/h3\u003e\n\n\u003cp\u003eYes, a separate English working reference for Swedish operations. Excel and the detailed guide have Swedish main fields.\u003c\/p\u003e\n\n\u003ch3\u003eAre the PDF files electronically fillable forms?\u003c\/h3\u003e\n\n\u003cp\u003eNo. The PDF versions are searchable print and reference documents; Word and Excel are editable formats.\u003c\/p\u003e\n\n\u003ch2 id=\"mb-kallor\"\u003eGovernment sources and related products\u003c\/h2\u003e\n\n\u003cul\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"https:\/\/metodstod-informationssakerhet.msb.se\/\"\u003eMSB's methodology support for systematic information security work\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"https:\/\/www.digg.se\/kunskap-och-stod\/oppna-och-delade-data\/vagledning-for-att-tillgangliggora-information\"\u003eDigg – guidance for making information available\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"https:\/\/www.imy.se\/verksamhet\/dataskydd\/det-har-galler-enligt-gdpr\/informationssakerhet\/sakerhetsatgarder\/\"\u003eIMY – security measures according to GDPR\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"https:\/\/klassa.skr.se\/sidor\/stodmaterial\/Informationsklassning\/vagledning-for-informationsklassning\"\u003eSKR KLASSA – guidance for information classification\u003c\/a\u003e.\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003ca href=\"\/en\/products\/behorighetsrevision-atkomstgranskning-2026-2027-excel-word-pdf\"\u003eAccess Audit \u0026amp; Permissions Review\u003c\/a\u003e and \u003ca href=\"\/en\/products\/it-onboarding-behorighetsbestallning-2026-2027-excel-word-pdf\"\u003eIT Onboarding \u0026amp; Access Requests\u003c\/a\u003e.\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eDelivery:\u003c\/strong\u003e Digital ZIP with 6 DOCX, 6 PDF, and 1 XLSX. No physical product is sent. In cases of security protection, high-risk processing, or complicated legal issues, a responsible specialist should be consulted.\u003c\/p\u003e\n\n\u003cp class=\"mb-product-related-guide\"\u003e\u003cstrong\u003ePractical guidance:\u003c\/strong\u003e Do you want to start by mapping information sets and assessing CIA? Read our \u003ca href=\"\/en\/blogs\/foretag\/informationsklassning-krt-steg-for-steg\"\u003eguide to information classification step-by-step, with classification matrix and checklist\u003c\/a\u003e before working further in the document package.\u003c\/p\u003e\n\u003c\/ol\u003e\u003c\/section\u003e","brand":"Svenska Dokumentmallar","offers":[{"title":"Default Title","offer_id":55710660788566,"sku":"INFORMATIONSKLASSNING-INVENTERING-2027","price":79.0,"currency_code":"SEK","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0827\/2373\/3846\/files\/informationsklassning-informationsinventering-2027-hero.png?v=1791788511","url":"https:\/\/mallbutiken.se\/en\/products\/informationsklassning-informationsinventering-2026-2027-excel-word-pdf","provider":"Mallbutiken","version":"1.0","type":"link"}