Educause Security Discussion mailing list archives

Re: Data Classification - Data Request Process


From: Brian J Smith-Sweeney <bsmithsweeney () NYU EDU>
Date: Tue, 8 Apr 2014 10:50:43 -0400

On Mon, Apr 7, 2014 at 3:26 PM, Amanda Williams <akwilliams () pittstate edu>wrote:

We are working on our data classification plan and was wondering what
process places used to grant users from "department A" access to data that
was owned/managed by "department B".

Thanks.

*Amanda Williams *
IT Security Officer
Pittsburg State University
620.235.4657


Hi Amanda,

Our Data Classification Table is here in case you find it useful:

     http://www.nyu.edu/its/policies/data-classification.html

As it currently stands IT generally serves a routing function for data
requests and connects up the requester to the appropriate business owner on
campus, and also provides some guidance when needed.

Happy to discuss further offline if you like.  Best of luck!

Cheers,
Brian

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Brian Smith-Sweeney , Assistant Director
ITS Technology Security Services, New York University
http://www.nyu.edu/its/security
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Current thread: