This Information Classification and Handling Policy outlines the guidelines and procedures for the management of information classification within the Netspective Communications LLC. [FII-SCF-018-PRI-07]
- Netspective Communications LLC defines information classifications based on the sensitivity, criticality, confidentiality, privacy requirements, and value of the information.
- All information assets, whether generated internally or externally, shall be categorized into one of these information classifications: [FII-SCF-009-DCH-14]
- Restricted
- Confidential.
- Internal.
- Public.
- When information of various classifications is combined, the resulting collection of information or new information shall be classified at the most restrictive level among the sources.
- The classification of each information asset is to be reviewed at periodic intervals not exceeding nqspInformationAssetPeriod
- A specific asset classification scheme and related guidelines to be developed for this purpose.
- Both physical as well as electronic information shall be labeled in accordance with Netspective Communications LLC assets management policy and asset classification scheme. [FII-SCF-016-NET-13]
- Standard document naming convention
- Providing information label at the footer of documents
- Naming of hardware, software, media, equipment’s using a unique number to each asset.
- Register to show where the hardware, software, media is kept in the stockrooms
- Documents, hardware items and removable media physical labeling shall include appropriate security classifications in accordance with Netspective Communications LLC assets management. [FII-SCF-003-BCD-02]
- Electronic labeling for computer-based information shall be introduced at folder level for sensitive (secret) and confidential information in accordance with Netspective Communications LLC assets management.
- Information assets shall be maintained, handled, stored, transported (or transmitted) and destroyed in accordance with Netspective Communications LLC information labeling and handling procedures associated with the information asset’s classification label.
- All information assets, whether generated internally or externally, shall be categorized into one of these information classifications: [FII-SCF-009-DCH-14]
Approved by
Ajay Kumaran Nair
on June 16, 2023
|
Last Updated by
Arun K R
on
June 16, 2023