Question

using the data classification scheme presented in this chapter, identify and classify the information contained in your personal computer or personal digital assistant. based on the potential for misuse or embarrassment, what information is confidential, sensitive but unclassified, or suitable for public release?

Answer 1

To me, Confidential Information are:

1. Personal financial information (e.g. bank account numbers, credit card numbers, social security numbers)
2. Medical records
3. Trade secrets

Sensitive but Unclassified Information are:

1. Personal information (home address, phone number, e-mail address)
2. Social media posts
3. Vacation photos

Lastly, Suitable for Public Release information are:

1. Publicly available records ( e.g. news articles, government documents, social media posts)
2. General marketing information
3. Non-sensitive customer data (e.g. name, company name, etc.)

Note that:

Confidential information is data that, if disclosed, could cause significant harm or damage to an individual or organization.

Sensitive but unclassified information is data that could potentially cause embarrassment or harm if disclosed, but it does not meet the criteria for confidential information.

Lastly, information that is suitable for public release is data that does not pose a significant risk of misuse or embarrassment if disclosed.