{
  "id": "workflow:data-classification-audit",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-cross-functional.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Data Classification Audit",
    "workflowKind": "governance",
    "triggerType": "scheduled",
    "typicalCadence": "semi-annually",
    "complexity": "cross-team",
    "description": "Audits data classification accuracy and access controls across\norganizational data stores -- scanning data repositories for\nunclassified or misclassified assets, verifying PII and sensitive data\nlabeling against classification policy, reviewing access-control lists\nagainst data-classification tiers, checking encryption-at-rest and\nin-transit compliance for each classification level, auditing\ndata-sharing agreements for classified data flows, and validating\ndata-retention enforcement. Produces classification audit report and\nremediation actions for misclassified assets. Excludes classification\npolicy definition.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:data-classification-audit",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "role:data-scientist",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "role:license-auditor",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "skill-area:data-governance",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "skill-area:identity-security",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "domain:legal",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "domain:operations",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "responsibility:data-quality-monitoring",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "org-unit:data-governance-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:data-classification-audit",
      "to": "org-unit:compliance-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}