08.11.2014 Views

Data Classification and Privacy - Office of Information Technology ...

Data Classification and Privacy - Office of Information Technology ...

Data Classification and Privacy - Office of Information Technology ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Why Classify <strong>Data</strong>?<br />

Simply put: EVERY IT general control audit requires some sort <strong>of</strong><br />

data classification st<strong>and</strong>ard or approach.<br />

FISCAM: “Classify information resources according to their<br />

criticality <strong>and</strong> sensitivity”<br />

State <strong>of</strong> MD: “Documenting <strong>and</strong> ensuring that a process is<br />

implemented for the classification <strong>of</strong> information in accordance<br />

with the <strong>Information</strong> Sensitivity <strong>and</strong> <strong>Classification</strong> St<strong>and</strong>ard”<br />

USM Guidelines: “Identify critical systems – high value, high<br />

risk, critical service, critical data”

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!