Procedures for handling of assets need to be documented. This fits hand in glove with information classification and should be typically constructed and implemented together. You will need to think about any access restrictions, a record of recipients and the handling of temporary copies. If you share classified information with other organisations you will need to include how this should work as part of your handling procedures and obviously your counterparties need to understand and follow your requirements for the information.