Introduction¶

Banks usually get stuck on three issues when implementing data classification and grading. First, there are too many regulations: Data Security Management Measures, industry grading guidelines, Personal Financial Information Protection Technical Specifications, Financial Data Security Grading Guidelines, and People’s Bank of China Decrees. Their criteria are not entirely consistent, making it easy for them to conflict when applied to a specific bank’s data. Second, there is uncertainty on how to segment: how to divide the four major categories, how to determine levels, and who makes the decisions often remain at the documentation level. Third, levels are determined without supporting actions: once grading is complete, control measures, rectification items, and reporting materials are often drafted in isolation.

Below is an introduction to a Skill specifically designed for the banking industry, organizing the content from classification to reporting into an executable workflow.

What is this¶

This is a practical guide Skill for “Bank Data Classification and Grading,” positioned to provide compliance, security, technical, and business personnel in banks with a complete solution for building a data classification and grading system from scratch. It is not a paraphrase of a single regulation, but rather organizes the common requirements of multiple regulations into a set of classification frameworks, grading frameworks, and implementation checklists.

Information from the SkillHub resource page:

• Coordinate: @user_a7828590/classification-banking-data
• Version: 1.0.0
• Source: community
• Category: professional
• Publisher: user_a7828590
• Tags: requires_api_key=false
• Rating: 100000, 2173 Downloads

Official URL: https://api.skillhub.cn/user_a7828590/classification-banking-data

Regulatory Coverage¶

This Skill explicitly covers the following regulations and superior law requirements:

• Data Security Management Measures for Banking and Insurance Institutions
• Financial Information Service Data Classification and Grading Guidelines (June 2026 Edition)
• JR/T 0171-2020 Personal Financial Information Protection Technical Specifications
• JR/T 0197-2020 Financial Data Security Grading Guidelines
• People’s Bank of China Decree [2025] No. 3

Before actual use, it is recommended to first confirm the regulatory criteria and latest versions applicable to your bank. Regulations are updated frequently; the items organized in this Skill are subject to the version you have obtained.

Core Content 1: Classification System¶

The classification system organizes data into four major categories:

1. Customer Data
2. Business Data
3. Operations Management
4. System Operations and Maintenance

The function of these four categories is to first locate the data. This classification step determines the input for subsequent grading; if the classification is wrong, the level will be incorrect even if it is accurate.

Core Content 2: Grading System¶

The grading system is divided into four levels:

1. Core
2. Important
3. Sensitive General
4. Routine General

The level determines the intensity of subsequent security controls. The higher the level, the stricter the control measures.

Core Content 3: Grading Elements and Process¶

The grading section provides two lines: grading elements and the grading process. First, determine the data’s position regarding impact degree based on elements, then go through the complete process to complete the grading action, rather than simply deciding the level based on experience.

Core Content 4: Security Control Measures¶

Accompanying the grading are security control measures. The purpose of this section is to translate levels into concrete actions: defining the protection requirements for data at different levels, rather than just obtaining a grading table.

Core Content 5: Compliance Checklist¶

The compliance checklist is used for self-inspection and rectification. When performing rectification, you can check items one by one against the list to confirm which items have not yet been implemented, avoiding determining the scope of rectification based solely on intuition.

Core Content 6: Important Data Identification and Reporting Guidelines¶

This section addresses regulatory reporting scenarios: identifying which data qualifies as important data requiring reporting, and the preparation path for reporting materials. The format requirements for reporting materials should be based on the current requirements of the regulatory institution.

Installation and Activation¶

The fetched materials do not provide specific installation commands or configuration file paths, only the coordinate @user_a7828590/classification-banking-data and the source tag community. Therefore, unverified installation steps are not provided here.

For Skills following the general SKILL.md format, the activation method depends on the Agent environment you are using: after pulling the coordinate from SkillHub and loading the corresponding Skill directory, simply state your classification and grading needs in the conversation to trigger it. requires_api_key=false means no additional key configuration is required.

Applicable Scenarios¶

The applicable scenarios listed in the materials include:

1. Building a classification system: Setting up the four major categories from scratch.
2. Determining data levels: Grading data according to grading elements and processes.
3. Formulating security control measures: Matching controls according to levels.
4. Compliance rectification: Using checklists for self-inspection and rectification.
5. Preparing regulatory reporting materials: Identifying important data and preparing reports.

The corresponding user groups are compliance, security, technical, and business personnel in banks.

Precautions¶

• This is a practical guide from a community source (community), not an official standard text. When citing regulatory clauses, refer to the original text.
• Regulatory versions are updated; the June 2026 version of the guidelines is one of its coverage areas. Verify if a newer version is in effect before use.
• The classification and grading frameworks need to be implemented in combination with the bank’s actual data assets. The Skill provides frameworks and processes, not the bank’s specific data inventory.
• There is no evidence that it has built-in automatic grading tools or the ability to integrate with internal systems; data asset information needs to be filled in manually.

Conclusion¶

The value of this Skill lies in organizing the classification and grading requirements scattered across multiple regulations into a complete chain: classification, grading, grading process, control measures, compliance inspection, and important data reporting. If you are building or rectifying a bank data classification and grading system, you can start here and then execute against the specific regulatory clauses applicable to your bank.

Official URL: https://api.skillhub.cn/user_a7828590/classification-banking-data