New answers tagged

3

Building on @AdHominem's good answer, I would add that your organization should have a security policy that clearly lays out your information classification guidelines. It's common to define three or four levels, such as "public", "internal", "confidential", and "sensitive". With each level, the policy should state very clearly what can happen with ...


4

Sensitivity of data is determined by the data owner who is responsible for classifying the information and also liable in case the information gets compromised. So no matter if data is used by human resources department or marketing, the classification will stay the same. The relevant metric for estimating the sensitivity is closely related to the cost of ...


0

It would be similar to the challenge of hiring a janitor for a building, he would get to have all the keys, he can open any door, but the reason is because he needs them to do his job. Symmetrically one can think of this age old problem and look at ways trust is granted historically. Although there's no clean-cut technical solution to this human problem, ...



Top 50 recent answers are included