Educause Security Discussion mailing list archives

Re: data classification


From: Brian Reilly <reillyb () GEORGETOWN EDU>
Date: Tue, 27 May 2003 13:02:19 -0400

On Tue, 27 May 2003, Ted Frohling wrote:

[...]
What are other campuses doing in the area of data classification in light
of the educational function being a public institution, etc.


Ted,

We address this in our Information Security Policy
(http://www.georgetown.edu/policy/technology/security.htm).  Information
is classified into one of three categories:  Confidential,
Internal-Use-Only, and Unrestricted.  Data stewards (e.g. University
Registrar, University Librarians, etc.) have the primary responsibility of
classifying their information and assigning authorizations.

--Brian

______________________________________________
Brian Reilly, CISSP
University Network Security Officer
Georgetown University, UIS
<reillyb () georgetown edu>
+1 202.687.2775

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.

Current thread: