Policies And Procedures

Front 1

Sensitive Data

Back 1

Any information that can result in a loss of security, or loss of advantage to a company, if accessed by unauthorized persons

Front 2

Public Data

Back 2

Has no impact to the company if released and is often posted in the open-source environment.

Front 3

Private Data

Back 3

Contains data that should only be used within the organization

Front 4

Confidential Data

Back 4

Highest classification level that contains items such as trade secrets, intellectual property data, source code, and other types that would seriously affect the business if disclosed

Front 5

Unclassified data

Back 5

Data than can be released to the public.

Front 6

Sensitive but Unclassified

Back 6

Items that wouldn’t hurt national security if released but could impact those whose data is contained in it

Front 7

Confidential Data

Back 7

Data that could seriously affect the government if unauthorized disclosure were to happen

Front 8

Secret Data

Back 8

Data that could seriously damage national security if disclosed

Front 9

Top Secret Data

Back 9

Data that could gravely damage national security if it were known to those who are not authorized for this level of information

Front 10

Data Owner

Back 10

ultimate responsibility for maintaining the confidentiality, integrity and availability of the information asset

Front 11

Data Steward

Back 11

A role focussed on the quality of the data and associated metadata

Front 12

Data Custodian

Back 12

A role responsible for handling the management of the system on which the data assets are stored

Front 13

Privacy officer

Back 13

A role responsible for the oversight of any PII/SPI/PHI assets managed by the company

Front 14

Personal Identifiable Information (PII)

Back 14

A piece of data that can be used either by itself or in combination with some other pieces of data to identify a single person

Front 15

Privacy Act of 1974

Back 15

Affects U.S. government computer systems that collects, stores, uses, or disseminates personally identifiable information

Front 16

(HIPAA)

Back 16

Affects healthcare providers, facilities, insurance companies, and medical data clearing houses

Front 17

Sarbanes-Oxley (SOX)

Back 17

Affects publicly-traded U.S. corporations and requires certain accounting methods and financial reporting requirements

Front 18

Gramm-Leach-Bliley Act (GLBA)

Back 18

Affects banks, mortgage companies, loan offices, insurance companies, investment companies, and credit card providers

Front 19

Federal Information Security Management (FISMA)

Back 19

Requires each agency to develop, document, and implement an agency-wide information systems security program to protect their data

Front 20

Help America Vote Act (HAVA) of 2002

Back 20

Provides regulations that govern the security, confidentiality, and integrity of the personal information collected, stored, or processed during the election and voting process