Data Classification Matrix Template

Data access in conjunction with data owners develop data access guidelines for each data classification label.

Data classification matrix template. The context of datainformation can be segmented into administrative activities common to all agencies and the mission specific activities of a given agency. Data user person organization or entity that interacts with accesses uses or updates data for the purpose of performing a task authorized by the data owner. We classify our information assets into risk categories high moderate. Consistent use of this data classification system will facilitate business activities and help keep the costs for information security to a minimum.

Information classification matrix and handling guide information whose unauthorized disclosure particularly outside the organization would be inappropriate and inconvenient. This term means that information is not disclosed to any person who does not have a legitimate and demonstrable business need to receive the information. Institutional data is categorized into data classifications as defined in policy dm01. Data classification is a process of consistently categorizing data based on specific and pre defined criteria so that this data can be efficiently and effectively protected.

This standard for the university community has been created to help effectively manage information in daily mission related activities. The university of pittsburgh takes seriously its commitment to protect the privacy of its students alumni faculty and staff as well as to protect the confidentiality of information important to the universitys academic and research mission. There are four classification levels of institutional data at indiana university. The organizations data classification system has been designed to support the need to know so that information will be protected from unauthorized disclosure use modification and deletion.

Data users must use data in a manner consistent with the purpose intended and comply with this policy and all policies applicable to data use. Management of institutional data to ensure proper handling and sharing of data based on sensitivity and criticality of the information. You do this by looking at the key at the top of the classification matrix now you need to look down the first and second columns of the classification matrix until you find the action that you want to take. We need a standard process for determining the sensitivity of information we collect and maintain as that information relates to an agencys mission.

Identify which column covers the information data you wish to handle.