Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd
Upload
596 views

Data Classification Policy

This document outlines Iowa State University's draft Data Classification Policy, which provides a method to categorize information collected, stored, and managed by the university based on the impact of unauthorized exposure. The policy applies to all persons and entities with access to university data used for research, teaching, outreach, or business functions. It requires data stewards to classify data and ensure it is protected according to classification standards and minimum security guidelines, informing the Data Governance Committee if needed.

Uploaded by

muzaffar30
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
596 views

Data Classification Policy

This document outlines Iowa State University's draft Data Classification Policy, which provides a method to categorize information collected, stored, and managed by the university based on the impact of unauthorized exposure. The policy applies to all persons and entities with access to university data used for research, teaching, outreach, or business functions. It requires data stewards to classify data and ensure it is protected according to classification standards and minimum security guidelines, informing the Data Governance Committee if needed.

Uploaded by

muzaffar30
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 1

Data Classification Policy Draft

Effective: to be determined
Updated/Revised: under review
Contact: Office of the CIO

Introduction
The Iowa State University Data Classification Policy provides the university with a
method to categorize the information collected, stored, and managed by the university
community. Using the data classification method will improve the ability of the
university community to properly manage access to university information in
compliance with federal and state laws and regulations, and other university policy
requirements.

Scope
This policy applies to:

All persons or entities that have access to Iowa State University data
Electronic and physical data utilized by the university community for the purpose
of carrying out the institutional mission of research, teaching, outreach, and data
used in the execution of required business functions, limited by any overriding
contractual or statutory regulations

Iowa State University data stored on university or non-university resources must be


verifiably protected according to the Minimum Security Standards and Guidance.

Policy Statement
Data stewards shall classify information according to the impact resulting from
unauthorized exposure as per the standards defined in the Data Classification Standards
and Guidance. Data stewards may refer classification decisions to the Data Governance
Committee.
Data custodians and data users shall inform data stewards of any data that requires
classification.
Data stewards, data custodians, and data users shall ensure data is protected
according to the classification assigned as prescribed in the Minimum Security
Standards and Guidance.
The Data Governance Committee shall render the final decision on classification in
cases of indecision or when a data steward cannot be identified.

You might also like