1. Information Sensitivity
By Michael Huber

2. Overview Purpose Classifications Policy Degrees of Sensitivity
Enforcement

3. Purpose Helps employees determine which information is sensitive
Gives employees a relative sensitivity of information that should not be disclosed outside of the office

4. Classifications
Public
Confidential
“Third Party” Confidential

5. Public Information Declared public knowledge
Can freely be given to anyone without any threat of damage to the company

6. Confidential Information
All other information
A continuum
Critical: Trade secrets, developmental programs, potential acquisition targets etc.
Less Critical: Telephone directories, personnel information

7. “Third Party Confidential” Information
Information from other companies
Ex.
vendor lists, customer orders, supplier information etc.

8. Policy
Minimal Sensitivity - General corporate information; some personnel and technical information
Access
Distribution within company
Distribution outside Internal mail
Electronic Distribution
Storage
Disposal
Penalty for disclosure

9. Policy(cont.)
More Sensitivity - Business, financial, technical, and most personnel information
Access
Distribution within company
Distribution outside Internal mail
Electronic Distribution
Storage
Disposal
Penalty for disclosure

10. Policy(cont.)
Most Sensitive - Trade secrets & marketing, operational, personnel, financial, source code, & technical information integral to the success of our company
Access
Distribution within company
Distribution outside Internal mail
Electronic Distribution
Storage
Disposal
Penalty for disclosure

11. Enforcement
Violation of this policy may result in disciplinary action, up to and including termination of employment.

12. Questions??