Urgent - Quick Question about "Confidential" information classification and marking

[Jim Moore <jhmfa () CIS RIT EDU>]

I am introducing the Institute to a information classification system.
Based on some things that I had read, and conversations with a seasoned
researcher, and the director of our technology licensing office, I had
gone with the category "RIT - Confidential" instead of "Confidential"
because of government sponsored researh issues.

This was my understanding:

1) If we have US Government sponsored research that is classified
"Confidential" and

2) If we use "Confidential" (Just like the U.S. Government)

Then

3) We have to protect all of data marked "Confidential" at the U.S.
Government Confidential level.

One of our directors basically said "Just write the contracts with the
government differently, and keep the information separate.

Question 1 - Is my understanding correct?
Question 2 - Can it be handled the way one of our directors suggests?
Question 3 - Should we go with RIT - Confidential anyways, because it is
more clear in communication?
Question 4 - What do you use?

Thanks

Jim

- - -
Jim Moore, CISSP, IAM
Information Security Officer
Rochester Institute of Technology
13 Lomb Memorial Drive
Rochester, NY 14623-5603
Office: 585-475-5406
Fax: 585-475-7950

"In cases of defence 'tis best to weigh the enemy more mighty than he
seems" - William Shakespeare (Henry V, Act 2, Scene 4)

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.