What is a common mistake with data protection and classification in Cloud Security?

Applying the same controls to public and regulated data either wastes cost or under-protects sensitive information.