Re: Info Classification Policy implementation

[Sarah Stevens <sarah () STEVENS-TECHNOLOGIES COM>]

Danna,
 
Have you looked at FIPS 199 or NIST 800-60?  They provide TERRIFIC guidelines for data classification.  If it's not too 
late, I would be happy to send you some free example project plans for data classification efforts.
 
I am a vendor, but I am very active in this group and there are never any strings attached to my help on this board.
 
Sarah E Stevens, CISSP
President
Stevens Technologies, Inc.
(704) 625-8842 x500
 
"Security solutions for your organization."
 
CONFIDENTIALITY NOTICE:  This e-mail is intended only for the use of the individual or entity to which it is addressed 
and may contain information that is privileged, confidential and exempt from disclosure under applicable law.  If you 
have received this communication in error, please do not distribute and delete the original message.  Please notify the 
sender by e-mail at the address shown.  Thank you for your compliance.


________________________________

From: Gianforte, Danna [mailto:Danna.Gianforte () PEPPERDINE EDU]
Sent: Thu 1/3/2008 3:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Info Classification Policy implementation



We're planning to implement a new Information Classification Policy, and we're looking for case studies or folks 
willing to share their experiences with us on how they implemented the policy at their institution.  We're presenting 
to our Management Committee soon, and we know the major concern across campus will be:  timeline, who's responsible for 
compliance, hurdles, extra resources required, etc, etc.

 

Does anyone know of any documented case studies on implementation of a classification policy?  Or - would you mind 
sharing your school's experience with this on the above mentioned topics?

 

Thanks.

Danna

----------------------------------------------------------------------------
Danna Gianforte
Senior Director, Information Services & Program Management
Information Technology
Pepperdine University
310.506.4642  (office)
979.739.8920  (cell)
http://www.pepperdine.edu/it <http://www.pepperdine.edu/it>