Information Sensitivity By Michael Huber

Overview Purpose Classifications Policy Degrees of Sensitivity Enforcement

Purpose Helps employees determine which information is sensitive Gives employees a relative sensitivity of information that should not be disclosed outside of the office

Classifications Public Confidential “Third Party” Confidential

Public Information Declared public knowledge Can freely be given to anyone without any threat of damage to the company

Confidential Information All other information A continuum Critical: Trade secrets, developmental programs, potential acquisition targets etc. Less Critical: Telephone directories, personnel information

“Third Party Confidential” Information Information from other companies Ex. vendor lists, customer orders, supplier information etc.

Policy Minimal Sensitivity - General corporate information; some personnel and technical information Access Distribution within company Distribution outside Internal mail Electronic Distribution Storage Disposal Penalty for disclosure

Policy(cont.) More Sensitivity - Business, financial, technical, and most personnel information Access Distribution within company Distribution outside Internal mail Electronic Distribution Storage Disposal Penalty for disclosure

Policy(cont.) Most Sensitive - Trade secrets & marketing, operational, personnel, financial, source code, & technical information integral to the success of our company Access Distribution within company Distribution outside Internal mail Electronic Distribution Storage Disposal Penalty for disclosure

Enforcement Violation of this policy may result in disciplinary action, up to and including termination of employment.

Questions??