Re: Data Classification - Data Request Process

[Kees Leune <leune () ADELPHI EDU>]

I like to follow a role-based approach. Data owner defines roles with
associated access permissions, and supervising manager assigns persons to
roles allocated to their sphere of control. It is not perfect, but seems to
work reasonably well.

*Dr. Kees Leune*
Information Security Officer
Adelphi University
Garden City, NY
+1 (516) 877-3936


On Mon, Apr 7, 2014 at 3:26 PM, Amanda Williams <akwilliams () pittstate edu>wrote:

> We are working on our data classification plan and was wondering what
> process places used to grant users from "department A" access to data that
> was owned/managed by "department B".
>
> Thanks.
>
> *Amanda Williams *
> IT Security Officer
> Pittsburg State University
> 620.235.4657