It classifies data by security, sensitivity, and risk level, to ensure adequate safeguards and protections are established.