Data "categorization" is the identification and organization of electronic information assets according to their file type, i.e., text documents, photos, spreadsheets, applications, etc. What is needed is an easy and reliable way to automate what can be a tedious and time-consuming process that involves millions of files. Fortunately, there are commercial solutions that perform this work. The best tool not only categorizes information assets but is also part of an integrated information technology (IT) security system that performs data classification. Once data has been categorized, it then must be organized into a classification system that addresses the security requirements of data content. In the classification process, IT security managers must make tough decisions about what information is vital, what is highly sensitive, what is important for legal or regulatory compliance, what will be required for audits, and what is less important or not critical to the business. This article provides a checklist of issues to consider in making data classification decisions. In performing data security management, organizations need an automated solution that discovers, classifies, and manages business information, enabling the next phase of information lifecycle management for their files. The EMC Software Group has developed the Documentum Enterprise Content Management platform, a unified solution that controls, secures, and tracks information and also disposes of all copies regardless of where they reside. It gives content owners the ability to restrict user access, set up watermarks, block printing or forwarding to unauthorized recipients, and revoke the ability to open a file.