Topic starter
02/06/2026 6:58 pm
TL;DR: NIST’s SP 1800-39 draft shows how automated tools can discover, identify, and label unstructured data at scale, using a synthetic corpus of 25,884 files and 12 target data types, according to Cyera’s analysis of the guide. Manual classification is no longer a viable control model when visibility, accuracy, and speed must hold across modern enterprise estates.
Editorial analysis by NHI Mgmt Group, based on content published by Cyera: “The Era of Manual Data Classification is Officially Over”.
Key questions
Q: How should teams classify unstructured data at enterprise scale?
A: Start by mapping where unstructured data lives, then separate discovery, content identification, and labelling into distinct steps.
Q: Why do data classification programmes fail in practice?
A: They fail when labels are treated as the control instead of the starting point.
Q: What are the signs that automated classification is not trustworthy?
A: Look for high exception volumes, inconsistent labels across similar files, and no clear measurement of false positives or false negatives.
Practitioner guidance
- Define a classification baseline for unstructured data Inventory the main unstructured repositories first, then map which content types your current scheme can label reliably and which ones depend on human interpretation.
- Test precision and recall before broad rollout Validate automated classification against a labelled sample set so you can see false positives, false negatives, and performance differences by data type.
- Prioritise business-specific sensitive data classes Identify the learned or contextual categories that matter to your organisation, because those often carry more operational value than generic pattern-based labels.
Bottom line: Manual data classification does not scale well enough to support modern unstructured data estates, especially when repositories are distributed and constantly changing.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/06/2026 7:13 pm
Manual classification is no longer a viable control model for modern data estates. The core problem is not whether teams can label a document, but whether they can do so consistently across massive, moving, and semantically varied unstructured data. Once estates span cloud, SaaS, and on-premises systems, manual review becomes a bottleneck rather than a control. Practitioners should treat classification as an operational capability, not an occasional data-cleanup task.
A few things that frame the scale:
- Business leaders plan to spend $124 million on average on AI in 2026, and 91% say data security and risk will shape their AI strategy.
A question worth separating out:
Q: How do classification labels support Zero Trust data controls?
A: Labels turn data understanding into policy signals. When labels are reliable, teams can use them to guide access decisions, monitoring, retention, and segmentation. When labels are weak, downstream controls inherit that uncertainty and become harder to defend in audits or operational reviews.
👉 Read our full editorial: NIST SP 1800-39 shows why manual data classification no longer scales