Re: Data Classification Decision Tree

[Rich Graves <rcgraves () GMAIL COM>]

Do yourself and your uses a favor and don’t go changing the labels like from Moderate to Medium, just because you want 
to. When stealing a good idea, with permission, just steal it!!!

Plain English is way better than attempts at legalese or military or corporate speak. Sometimes, you do need technical 
or regulatory terms. Otherwise, low moderate high wins.

Sent from my iPhone

> On Aug 12, 2021, at 6:02 PM, Robert Smith <Robert.Smith () ucop edu> wrote:
>
> 
> Hello,
>  
> I too am a fan of Stanford’s work.
>  
> Here is ours which follows similar thinking:
> https://security.ucop.edu/policies/institutional-information-and-it-resource-classification.html
>  
>  
> We have a swim lane model in the standard on that page that is a place to start with the decision tree.
>  
> Have a delightful day,
> Robert Smith, CISSP
> University of California Office of the President
> (510) 587-6244 (o)
> robert.smith () ucop edu
>  
> From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Orlando Leon
> Sent: Thursday, August 12, 2021 2:56 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Data Classification Decision Tree
>  
> Matthew,
>  
> I've always appreciated Stanford's guidelines and examples.
> https://uit.stanford.edu/guide/riskclassifications
>
> Regards,
> Orlando
> ---
> #CyberAware #Privacy #IdentityTheft 
> Shred it or regret it! Dispose of sensitive data properly to deter dumpster diving criminals. 
>  
>
> Remember: The Fresno State IT team will never ask for your password.
> ---
> Orlando Leon
> Vice President for Information Technology and Chief Information Officer
> California State University, Fresno
> 559.278.7280 (Office) | oleon () csufresno edu
>                             
>  
> Please note****All information in this communication, including attachments are strictly confidential and intended 
> solely for delivery to and authorized use by the addressee(s) identified above, and may contain privileged, 
> confidential information. If you are not the intended recipient, please take notice that any use, distribution, or 
> copying of this communication is unauthorized and may be unlawful.  If you have received this communication in error, 
> please notify the sender and delete this communication from your computer.
>  
>  
> On Thu, Aug 12, 2021 at 2:53 PM Matthew Long <0000010dcaedaad5-dmarc-request () listserv educause edu> wrote:
> Hi All,
>  
> I've been tasked with developing a decision tree to assist researchers with classifying their data. In addition, we 
> would also like to develop this to be used to classify instituional data. After determining the classification, the 
> user would then be able to identify what services are available as well as gain an understanding of what minimum 
> security controls need to be applied.
>  
> Does your University/College currently have a decision tree, framework or something similar available to share? Feel 
> free to reach out to me off list if that works better. Thanks in advance.
>  
> Regards,
> Matthew
>  
>  
> Matthew Long, MS, GDSA
> Information Security Officer & Sr. Security Architect
> 501 Stadium Drive
> Lincoln, NE 68588-0203
> Office: 402-472-1651
> matthew.long () nebraska edu
> https://its.nebraska.edu
>
>  
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
> person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
> and subscription information can be found at https://www.educause.edu/community
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
> person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
> and subscription information can be found at https://www.educause.edu/community
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
> person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
> and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community