PROTECTED is an Australian government data classification used for sensitive information that needs stronger security than unclassified material. It signals that the data must be handled under tighter controls for access, storage, transmission, and disposal, along with stricter personnel screening and need-to-know restrictions.
In cyber security, the classification matters because it changes the control baseline. Systems handling PROTECTED data usually require stronger identity management, logging, encryption, segmentation, and assurance evidence before they are approved for use. In cloud environments, agencies must confirm which controls are inherited from the provider and which remain their responsibility. Attackers target PROTECTED data because it is valuable for espionage, fraud, and reconnaissance, so defenders use classification to drive hardening, monitoring, and incident response.