Re: Data Classification of Video

[Robert Meyers <REMeyers () MAIL WVU EDU>]

If your present policy defines classification according to the information included in a data file, then you don't have 
to modify the policy IMHO. The format of the data should be completely independent of the decision to classify it. 
That's especially true if your audio/video repository is digitized. They are just another block of data files that fall 
under your current classification policy. Maybe simply adding a phrase to the existing policy that says it applies to 
university content regardless of storage media type may be necessary.

Bob Meyers
WVU Information Security

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Pardonek, Jim
Sent: Tuesday, February 11, 2014 2:01 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Data Classification of Video

I'm looking for some feedback on how other universities may have amended their data classification policies to include 
university generated audio and video content in the context of what types of content would cause a video to be 
classified as confidential or protected, or maybe just sensitive.  We are in the process of replacing our video 
repository and the question was brought to me.  Since Information Security owns most of the policy creation here, I'm 
struggling with how to word the thing.

Thanks,

James Pardonek, CISSP, CEH
Information Security Officer
Loyola University Chicago
1032 W. Sheridan Road | Chicago, IL  60660

*: (773) 508-6086