11. Data Classifications and Clearance Flashcards
Data Classifications and Clearance
Top Secret (TS)
National Security
Exceptionally grave damage
- Damage to national security
- Weaponsns blueprints
- Theater or war plans
- Espionage data
Data Classifications and Clearance
Secret (S)
National Security
Serious Damage
- Troop plans
- Deployment plans
- Reports on shortages or weaknesses
Data Classifications and Clearance
Confidential (C)
National Security
Damage
- intelligence reports
- operational or battle reports
- Mobilzation plans
Data Classifications and Clearance
Unclassified (U)
National Security
Declassified
Data Classifications and Clearance
Confidential
Private Sector
Exceptionally grave damage
- Proprietary information
- Trade secrets
- Source code
- Competitive advantage
Data Classifications and Clearance
Private
Private Sector
Serious Damage
- PHI
- PII
- Financial Data
- Employee data
- Payroll
Data Classifications and Clearance
Sensitive
Private Sector
Damage
- Network diagrams
- IP assignments
- SYstem and software specific information
Data Classifications and Clearance
Public
Private Sector
Publicly available
- Websites
- Advertisements
- Information publically available
Data Classifications and Clearance
Labels
OBJECTS have labels
- typically more granular i.e. Top secret - nuclear
- Allows subjects with right clearance to access them
Data Classifications and Clearance
Clearance
SUBJECTS have clearance
- Formal decision on a subjects current and future trustworthiness
- Higher clearance = more in depth the background check
Data Classifications and Clearance
Formal Access Approval
Document from data owner approving access to the data for a subject
- subject has to understand the requirements for accessing the data and liability involved
Data Classifications and Clearance
Need to know
You have access to the data. Does not mean you are allowed the data
- You need valid reasons for access the data
- Systems administrator has access to high level systems, does not mean they need to access the data
Data Classifications and Clearance
Least Privilege
Minimum necessary access to perform job duty
