Handling Sensitive Data 5.8

Question 1

Labeling Sensitive Data

Answer 1

Not all data has the same level of sensitivity. Different levels require different security and handling.

Question 2

Data Sensitivity Labels

Answer 2

Public/Unclassified - No restrictions

Private/Classified/Restricted/Internal Use Only - Restricted access, may require a non discloser agreement

Confidential - Very sensitive, must be approved to view

Question 3

Sensitive Data Types

Answer 3

Proprietary - Data that is the property of an org. May include trade secrets, often unique to an org.

Personally Identifiable Information (PII) - Data that can be used to identify an individual. Name, DOB, mother’s maiden, biometric data.

Protected Health Information (PHI) - Health info associated to an individual. Health stats, records, payments, etc.