How to classify information by sensitivity
PURPOSE
Classifying information helps people decide how to store, share, and protect it.
COMMON LEVELS
Typical levels include public, internal, confidential, and restricted. Names may vary, but the idea is to match protection to risk.
HOW TO CLASSIFY
Consider who should see the information, what harm could occur if exposed, and whether laws, contracts, or policies apply.
WHEN UNSURE
Choose the more protective classification until the data owner confirms.
BEST PRACTICE
Mark sensitive documents clearly when possible.