Re: Data Classification Decision Tree

[Robert Smith <Robert.Smith () UCOP EDU>]

Hello,

I too am a fan of Stanford’s work.

Here is ours which follows similar thinking:
https://security.ucop.edu/policies/institutional-information-and-it-resource-classification.html


We have a swim lane model in the standard on that page that is a place to start with the decision tree.

Have a delightful day,
Robert Smith, CISSP
University of California Office of the President
(510) 587-6244 (o)
robert.smith () ucop edu<mailto:robert.smith () ucop edu>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Orlando Leon
Sent: Thursday, August 12, 2021 2:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Data Classification Decision Tree

Matthew,

I've always appreciated Stanford's guidelines and examples.
https://uit.stanford.edu/guide/riskclassifications


Regards,

Orlando

---
#CyberAware #Privacy #IdentityTheft

Shred it or regret it! Dispose of sensitive data properly to deter dumpster diving criminals.


Remember: The Fresno State IT team will never ask for your password.

---

Orlando Leon
Vice President for Information Technology and Chief Information Officer
California State University, Fresno

559.278.7280 (Office) | oleon () csufresno edu<mailto:oleon () csufresno edu>

[http://www.fresnostate.edu/advancement/marketing/brand/images/Signature.jpg]                            
[http://www.fresnostate.edu/president/images/Principles_of_community.png]



Please note****All information in this communication, including attachments are strictly confidential and intended 
solely for delivery to and authorized use by the addressee(s) identified above, and may contain privileged, 
confidential information. If you are not the intended recipient, please take notice that any use, distribution, or 
copying of this communication is unauthorized and may be unlawful.  If you have received this communication in error, 
please notify the sender and delete this communication from your computer.


On Thu, Aug 12, 2021 at 2:53 PM Matthew Long <0000010dcaedaad5-dmarc-request () listserv educause 
edu<mailto:0000010dcaedaad5-dmarc-request () listserv educause edu>> wrote:
Hi All,

I've been tasked with developing a decision tree to assist researchers with classifying their data. In addition, we 
would also like to develop this to be used to classify instituional data. After determining the classification, the 
user would then be able to identify what services are available as well as gain an understanding of what minimum 
security controls need to be applied.

Does your University/College currently have a decision tree, framework or something similar available to share? Feel 
free to reach out to me off list if that works better. Thanks in advance.

Regards,
Matthew


Matthew Long, MS, GDSA

Information Security Officer & Sr. Security Architect

501 Stadium Drive

Lincoln, NE 68588-0203

Office: 402-472-1651

matthew.long () nebraska edu<mailto:matthew.long () nebraska edu>

https://its.nebraska.edu<https://its.nebraska.edu/>
[university of nebraska logo lockup with campuses]


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community