Re: Data Classification

["Williams, Matthew (wilmh)" <wilmh () UCMAIL UC EDU>]

University of Cincinnati Data Governance and Classification Policy - 
https://www.uc.edu/content/dam/uc/infosec/docs/policies/Data_Governance_and_Classification_Policy_9.1.1.pdf

We previously leveraged Digital Guardian DLP for our on-premise Exchange and Box environments, but we recently migrated 
to Office 365 and are now testing with Microsoft native tools.

Policy identifies roles and responsibilities, data types and classification, minimum safeguards, etc...

Thanks,

—
Matthew Williams
BSIT, CISSP, CISM, GSLC, GSTRT, ITIL V3
Director
Office of Information Security | University of Cincinnati
Direct - 513-556-3708 | Dept - 513-558-ISEC (4732)
matthew.williams () uc edu<mailto:matthew.williams () uc edu> | www.uc.edu/infosec<http://www.uc.edu/infosec>
Secure the Present, Protect the Future.

From: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Marty Leidner <marty () MAIL 
ROCKEFELLER EDU>
Reply-To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Friday, August 30, 2019 at 2:50 PM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Data Classification


Good Afternoon



We at Rockefeller University are considering how to move forward with the elusive goal/initiative of data 
classification, and would like to see how others are addressing this. I would greatly appreciate if you could respond 
to this brief survey. I will be happy to share the results with anyone who is interested:

 1. Do you have a data classification policy on your website or intranet?

 2. Do you use any tools to enable your user community to classify their data? If so, which ones? These could be 
enterprise tools, or even basic  tools that are built into other applications or platforms (e.g. Office365, Box, etc.) 
3. Do you enforce this policy, or in any way require data to be classified?



Thanks , and I wish everyone a wonderful labor day,

Marty

,

Thank You,

Marty Leidner,  CISSP
Chief Information Security Officer
The Rockefeller University
Information Security
212-327-7372
http://it.rockefeller.edu/information-security
Protector of the cyber realm




**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community