...
Level 1: Protected
Level 2: Restricted
Level 3: Confidential
Asset Management Policy Internal Use Only
The decision regarding which classification an information asset should fall into will be based on the following main criteria:
...
All classified information must be clearly labelled with the classification that has been assigned, so that employees, contractors and third parties are aware of the level of protection that must be applied, in accordance with [Organization Name] procedures.
Media handling
Removable media (for example SSD, DVD, memory stick) must not be used to store classified information.
...