Five-tiered commercial data classification approach according to the book CISSP Security Management and Practices