Re: data labeling

[Felecia Vlahos <fvlahos () COX NET>]

Robert,

Our data classification is in section 3.1 of our Information Security Plan
and encompasses 10 pages:

http://security.sdsu.edu/policy/Information_Security_Plan-2.3.pdf

- Three levels of classification
- Listing of elements within each classification
- Appropriate handling (reference table 3-1 a big hit on campus)
- Appropriate procedures/authorizers for use, inventory, reporting,
approving

We adopted a draft version of the California State University data
classification. We have used it for the past 2+ years.

I really appreciated the other examples posted to the list as there were
some great ideas for improving ours!

Thanks,
Felecia Vlahos
Information Security Officer
San Diego State University

On Thu, 06 May 2010 14:29:46 -0700, Robertwenrm Robertwenrm
<robertwenrm () yahoo com> wrote:

> We' re currently working on a project to label data based on information
> sensitivity.
> However we're not aware of any data classification method.
> can anyone recommend a method on which an information classification
> project has been successfully deployed?
> Any reference for a book regarding this topic would be very appreciated.
>
> Thank you


--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/