Assignment:
Assignment Description
Many organizations collect a significant amount of data that are used to create useful information. This information is used by the organization to manage personnel, customers, and resources and to measure business performance. Some information is more valuable and sensitive than other types of information used in the organization and therefore, information should be protected depending on its type. This includes the computers and networks used to process, transmit, or store data as well. Data classification schemes are often developed to address these issues. Some common schemes are identified as the following:
• Unclassified, Confidential, Secret, and Top Secret
• Public, Sensitive, and Confidential
• Company Proprietary, Business-Sensitive, and Critical
• PII, Business, and Public
Identify a data classification scheme for an organization that processes, transmits, and stores various types of data and information related to day-to-day activities. Consider data and information that may be created, handled, or disseminated by various types of business units in the organization.
Assignment Details
Write a paper of 500 to 700 words that will be presented to the board of directors or executive management that includes the following:
• Explain why it is necessary for an organization to consider developing a data classification scheme.
• You will describe a policy that implements the data classification scheme for your organization that processes, transmits, or stores different types of data and information.
• Finally, explain how you would communicate the importance of a policy that implements a data classification scheme for an organization to reduce risks related to unauthorized access and disclosure.
• You should consider how you would classify and handle the following information:
o Onboarding information related to a new employee hire (application, resume, Social Security number, driver's license, or emergency contact)
o Research and design information for a new product line that no other competitor has
o Press release about the acquisition of a new business unit
o Operational financial reports that articulate the performance of the sales force in relation to competitors
• There should also be a communication strategy section that includes the identification and proposal of an appropriate policy to support a data and information classification scheme to address the organizational needs.