Training Session 3-APPENDIX B - Data Classification and Handling Guidelines

APPENDIX B - Data Classification and Handling Guidelines

Pdf Summary

The Data Classification and Handling Guidelines provide guidance for protecting information based on a four-level classification scheme. The four levels of classification are: <br /><br />1. Restricted: This is the most sensitive business information that Oakleaf receives or produces and is only accessible to authorized employees, contractors, and business partners. Examples include Personally Identifiable Information (PII) and Non-Public Information (NPI).<br /><br />2. Confidential: This is highly-valuable, sensitive business information that is classified internally by Oakleaf. Examples include employee PII/PII, accounting, payroll, and financial information.<br /><br />3. Private: This is information originated or owned by Oakleaf, or entrusted to it by others. It may be shared with authorized individuals but not released to the general public.<br /><br />4. Public: This is information that can be released to the general public and is freely sharable both internally and externally.<br /><br />The guidelines outline specific handling requirements for each classification level, including storage, transmission, printing, copying/scanning, faxing, disposal, and release to third parties. Encryption is required for restricted and confidential information, while no special requirements are needed for public information.<br /><br />The guidelines also provide examples of sensitive data elements that fall under each classification level, such as social security numbers, financial account numbers, and employee data.<br /><br />The document has undergone revisions and has been approved by the Chief Information Security Officer (CISO) and the CEO and President of Oakleaf.

Keywords

Data Classification

Handling Guidelines

Four-level Classification Scheme

Restricted

Confidential

Private

Public

Sensitive Business Information

Handling Requirements

Encryption