This item is the separation of the organisation's document types by risk level and the mapping of which review layers apply to each level. It is done once and applied to every request.
Scope
Listing the document types, assigning a level using three questions, writing down the level-to-layer mapping and adding it to the request form as a field are within this item.
Out of scope
The organisation's information security classification is a separate matter; this item classifies in terms of translation risk.
Three questions
Does the text leave the organisation, does it create an obligation, and can it be withdrawn once it has been published? The answers place the document at a level of their own accord.
Why it is needed
Giving every document the same care looks fair, but it takes limited review effort away from the document that needs it most.
The level is chosen at the time of the request
A decision that is thought through afresh for every request both takes time and is applied inconsistently. A mapping made in advance by document type reduces the decision to a single selection.
The low level is labelled
A text produced with a single layer stays on file with that information; otherwise it may be used somewhere official months later.
Who sets it
The level is judged more accurately by the unit that will use the text than by the one sending it. If the two differ, the decision belongs to the user.
The data dimension is considered separately
Documents carrying special category personal data require a separate access regime even if their translation risk is low.
It is shared with the supplier
Level information that is known inside the organisation cannot be applied on the production side when it is missing from the request.
Findings call the level into question
If a serious finding emerges in a text produced at a low level, that type is moved up a level. The classification is sharpened by this feedback.
Periodic review
The risk of a document type can change over time. A classification that is done once and forgotten quietly drifts away from the real risk.
Unit of measurement
It is assessed by the number of document types covered; it is a one-off exercise.
It shows in the budget too
Different levels mean different layers and different turnaround times. When this structure is visible, the organisation makes its own decision with the cost in view.
How many levels are enough?
Three levels are enough for most organisations; more than that blurs the distinction and makes it harder to apply. A small number of clearly defined levels is applied better than a large number of fine gradations.
The list of document types is kept short
When every variation counts as a separate type, the list becomes unusable. Documents carrying similar risk are grouped under the same type.
Takeaway
Classification does not mean giving up review; it means allocating resources according to risk. Assigning levels with three questions, writing down the level-to-layer mapping, labelling the low level and periodic review: these four produce lower total risk with the same budget.