Information Sensitivity

1
Information Sensitivity

• By Michael Huber

2
Overview

• Purpose
• Classifications
• Policy
• Degrees of Sensitivity
• Enforcement

3
Purpose

• Helps employees determine which information is
  sensitive
• Gives employees a relative sensitivity of
  information that should not be disclosed outside
  of the office

4
Classifications

• Public
• Confidential
• Third Party Confidential

5
Public Information

• Declared public knowledge
• Can freely be given to anyone without any threat
  of damage to the company

6
Confidential Information

• All other information
• A continuum
• Critical Trade secrets, developmental programs,
  potential acquisition targets etc.
• Less Critical Telephone directories, personnel
  information

7
Third Party Confidential Information

• Information from other companies
• Ex.
• vendor lists, customer orders, supplier
  information etc.

8
Policy

• Minimal Sensitivity - General corporate
  information some personnel and technical
  information
• Access
• Distribution within company
• Distribution outside Internal mail
• Electronic Distribution
• Storage
• Disposal
• Penalty for disclosure

9
Policy(cont.)

• More Sensitivity - Business, financial,
  technical, and most personnel information
• Access
• Distribution within company
• Distribution outside Internal mail
• Electronic Distribution
• Storage
• Disposal
• Penalty for disclosure

10
Policy(cont.)

• Most Sensitive - Trade secrets marketing,
  operational, personnel, financial, source code,
  technical information integral to the success of
  our company
• Access
• Distribution within company
• Distribution outside Internal mail
• Electronic Distribution
• Storage
• Disposal
• Penalty for disclosure

11
Enforcement

• Violation of this policy may result in
  disciplinary action, up to and including
  termination of employment.

12

• Questions??