Provision for Data classification and IT security risk mapping