The auditor made us aware, that any assets containing PII or PHI data, should be by default set to "confidential". Marking them "internal" is incorrect, which was a minor non-conformity.

To exclude human error in future, we would highly appreciate an automatic classification of any assets in the inventory. PII/ PHI = confidential by default.