Educause Security Discussion mailing list archives
Re: Info Classification Policy implementation
From: Sarah Stevens <sarah () STEVENS-TECHNOLOGIES COM>
Date: Fri, 18 Jan 2008 20:11:17 -0800
Danna, Have you looked at FIPS 199 or NIST 800-60? They provide TERRIFIC guidelines for data classification. If it's not too late, I would be happy to send you some free example project plans for data classification efforts. I am a vendor, but I am very active in this group and there are never any strings attached to my help on this board. Sarah E Stevens, CISSP President Stevens Technologies, Inc. (704) 625-8842 x500 "Security solutions for your organization." CONFIDENTIALITY NOTICE: This e-mail is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you have received this communication in error, please do not distribute and delete the original message. Please notify the sender by e-mail at the address shown. Thank you for your compliance. ________________________________ From: Gianforte, Danna [mailto:Danna.Gianforte () PEPPERDINE EDU] Sent: Thu 1/3/2008 3:56 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Info Classification Policy implementation We're planning to implement a new Information Classification Policy, and we're looking for case studies or folks willing to share their experiences with us on how they implemented the policy at their institution. We're presenting to our Management Committee soon, and we know the major concern across campus will be: timeline, who's responsible for compliance, hurdles, extra resources required, etc, etc. Does anyone know of any documented case studies on implementation of a classification policy? Or - would you mind sharing your school's experience with this on the above mentioned topics? Thanks. Danna ---------------------------------------------------------------------------- Danna Gianforte Senior Director, Information Services & Program Management Information Technology Pepperdine University 310.506.4642 (office) 979.739.8920 (cell) http://www.pepperdine.edu/it <http://www.pepperdine.edu/it>
Current thread:
- Info Classification Policy implementation Gianforte, Danna (Jan 03)
- <Possible follow-ups>
- Re: Info Classification Policy implementation Sarah Stevens (Jan 18)