Data Classifications - SY0-601 CompTIA Security+ : 5.5

Labeling sensitive data

• Not all data has the same level of sensitivity – License tag numbers vs. health records

• Different levels require different security and handling – Additional permissions – A different process to view – Restricted network access

Data classifications

• Proprietary – Data that is the property of an organization – May also include trade secrets – Often data unique to an organization

• PII - Personally Identifiable Information – Data that can be used to identify an individual – Name, date of birth, mother’s maiden name, biometric information

• PHI - Protected Health Information – Health information associated with an individual – Health status, health care records, payments for health care, and much more

• Public / Unclassified – No restrictions on viewing the data

• Private / Classified / Restricted / Internal use only – Restricted access, may require a non-disclosure agreement (NDA)

• Sensitive - Intellectual property, PII, PHI

• Confidential - Very sensitive, must be approved to view

• Critical - Data should always be available

• Financial information – Internal company financial information – Customer financial details

• Government data – Open data – Transfer between government entities – May be protected by law

• Customer data – Data associated with customers – May include user-specific details – Legal handling requirements

placeholder

placeholder

placeholder

placeholder