Eric Osterhold authored a Blog Post entitled "Establishing classification types without going overboard". Eric states: "I’ve found that creating too many levels for classifying data defeats the process - users will not use a system with 6 or even 5 different classification levels. I often propose establishing 3 levels". He goes on to name "Restricted", "Sensitive" and "Public". Is this really enough?
Tuesday, March 31, 2009
Tuesday, January 20, 2009
Last weekend, I began doing my year-end housekeeping ritual. Organizing my file cabinets. Like many living in the hyper-expensive Bay Area, we have limited space. This means that all of my family’s records – taxes, investments, insurance (auto/home/life), automobile, house, credit card bills, utility bills, medical, school, warranty information, etc. – must fit in the three-drawer filing cabinet located in the closet of one of our bedrooms.
Tuesday, December 16, 2008
Today, I conducted a webinar entitled: "Using Classification to Achieve Enterprise Data Privacy".
I was recently reading IDC’s latest update to its groundbreaking research which measures the amount of digital information created and replicated (see: "The Diverse and Exploding Digital Universe, An Updated Forecast of Worldwide Information Growth Through 2011").
The updated study reports that – from 2007 through 2011 – a larger percentage of corporate information will “be subject to significant requirements” for information protection (growing from approximately 30% in 2007 to over 40% in 2011).
Tuesday, November 25, 2008
According to an article by the Enterprise Strategy Group (“Transitioning to an Information Infrastructure,” June 2007), “While it is not found on a balance sheet, information is quickly becoming a leverageable corporate asset that has both value and risk implications.”
One of those risks is that organizations (both public and private) are insufficiently protecting their sensitive or confidential data.