Re: Data classification

[Brian Reilly <reillyb () GEORGETOWN EDU>]

On Mon, 12 Jul 2004, Slade Griffin wrote:

> All,
>         Does anyone on this list deal with data classification?  If so I
> would like to discuss what levels or classifications are used in the edu
> community.  Thanks in advance.

Slade,

Georgetown addresses this in our Information Security policy; see
http://www.georgetown.edu/policy/technology/security.htm#scope.
Information is classified as confidential, internal-use-only, or
unrestricted.  Information that is not classified explicitly is classified
by default as follows: Information falling into one of the Confidentiality
categories listed above is treated as Confidential. Other information is
treated as internal-use-only unless it is published (publicly displayed in
any medium) by the data steward, in which case it is classified
unrestricted.

--Brian

______________________________________________
Brian Reilly, CISSP
University Network Security Officer
Georgetown University, UIS
<reillyb () georgetown edu>
+1 202.687.2775

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.