Data classification and management tools

[Gary Dobbins <dobbins () ND EDU>]

Does your campus use any specific tools and services for improving ease and
accuracy of data stewardship?

If so, please provide your answers to the following questions (esp. number
6) - I'll post aggregated results back to the list if there's interest.

1) Does your campus have a policy which defines classes of data by ensitivity?

2) Has your classification project completed?

3) Have you defined handling standards?
   (e.g. procedures, retention periods, im/permissible uses)

4) Are these standards defined per classification level, or per datum?

5) How are approved policy variations or alternative procedures tracked?

6a) Do you have an automated facility for conducting this activity?

6b) Manual process?

6c) FTE cost?

7) How do you make these policies/standards known to data users?

8) How do you determine compliance levels?

9) Overall satisfaction with your data stewardship support facility?

10) Things you would do differently if beginning anew?


Thanks for your help with this question.

--

  ------------------------------------------------------------
  Gary Dobbins, CISSP -- Director, Information Security
  University of Notre Dame, Office of Information Technologies