Educause Security Discussion mailing list archives
Re: Data Classification
From: Darren Morris <0000010f2d127348-dmarc-request () LISTSERV EDUCAUSE EDU>
Date: Tue, 3 Sep 2019 22:37:36 +0000
Darren Morris has shared a OneDrive for Business file with you. To view it, click the link below. [icon] MBS Information Security Policy.docx<https://mbsedu.sharepoint.com/:w:/s/InformationServices/CIO/EZeYbsx71bJDsSWv52-Z4Q0BxHMLISYVRq7gKcdgAafxmQ> Here at Melbourne Business School include classification into our overall information security policy. Governance is intened to be built into the Policy which is endorsed by the School’s executive. We are in the process (in fact meeting with a vendor this morning) to discuss how to integrate into Office 365 including SharePoint Online and Azure Information Protection. So I am interested in how “… the DLP rules in Office365 to detect and prevent the transmission of our “Red” data via e-mail) and what happens next and also DLP in the Office 365 world. Darren Morris | Chief Information Officer | Information Services Melbourne Business School 200 Leicester Street, Carlton, Victoria 3053, Australia T: 03 9349 8198 Email: d.morris () mbs edu<mailto:d.morris () mbs edu> [http://mbs.edu/getmedia/286fe400-ca7f-403e-a36b-cc850fb6a48d/email-sig-mbs-logo.jpg]<https://urldefense.proofpoint.com/v2/url?u=http-3A__cp.mcafee.com_d_avndz8Orho73DSn7HFCXCQQkPhOODsQsFK6QQkPhOOCztZUSzsQsL8ELIecCQQmknDzhOCqenPq7aRz6l0kGgFTEdCRi5eZ1ISWzpN55V-5FHYNuUVZZDHTbEIEEYevd7bP337bnjIyyHt57BgY-2DF6lK1FJ4SOrLOqbdQhPWbX9KVI06GgFTEdUrw8R9MFoCoQzYglEvax-5FAtfVvJrdII8L8CMmd96y0r-2D4Zfd40n-5FjVAPh1I43h00LDDAfB0yq80AT93PVg-2DxEwtH4Qg3oOc6y0bhGhzGFEw2SNDaQBJxexIsyrEDfoLhJYkuk&d=DQMGaQ&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=mxMiKFAZQJnrltMrq27YGA&m=zG6HsP1IxxmsIpdpaV46rDjKR4BeHSeXpvJ2SLDTr8k&s=b7BvFObFjxYpLtUQXMa3eB4h9SWZ9xVhYIT7eIGLLIE&e=> From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Williams, Matthew (wilmh) Sent: Tuesday, 3 September 2019 11:47 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Data Classification University of Cincinnati Data Governance and Classification Policy - https://www.uc.edu/content/dam/uc/infosec/docs/policies/Data_Governance_and_Classification_Policy_9.1.1.pdf<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.uc.edu_content_dam_uc_infosec_docs_policies_Data-5FGovernance-5Fand-5FClassification-5FPolicy-5F9.1.1.pdf&d=DwMGaQ&c=FcGMiTDX8FO-KAYppnKNhFgYxz2wb40a2pni_SOyB0w&r=Vq9qYfqO8Vk62Gu82XKXEw&m=oK2FoTFBYGjcEuR-_79kU84u16thm2XsD_uHupEImA0&s=1SMDhfxsHk9vuN19CfjmwyYe1VOc7P2m2JGPvwkMVKw&e=> We previously leveraged Digital Guardian DLP for our on-premise Exchange and Box environments, but we recently migrated to Office 365 and are now testing with Microsoft native tools. Policy identifies roles and responsibilities, data types and classification, minimum safeguards, etc... Thanks, — Matthew Williams BSIT, CISSP, CISM, GSLC, GSTRT, ITIL V3 Director Office of Information Security | University of Cincinnati Direct - 513-556-3708 | Dept - 513-558-ISEC (4732) matthew.williams () uc edu<mailto:matthew.williams () uc edu> | www.uc.edu/infosec<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.uc.edu_infosec&d=DwMGaQ&c=FcGMiTDX8FO-KAYppnKNhFgYxz2wb40a2pni_SOyB0w&r=Vq9qYfqO8Vk62Gu82XKXEw&m=oK2FoTFBYGjcEuR-_79kU84u16thm2XsD_uHupEImA0&s=4PDOb-FiaJBV8XeWoxf30r8etVVQ2INT2qUCe0von2k&e=> Secure the Present, Protect the Future. From: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of Marty Leidner <marty () MAIL ROCKEFELLER EDU<mailto:marty () MAIL ROCKEFELLER EDU>> Reply-To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Date: Friday, August 30, 2019 at 2:50 PM To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: [SECURITY] Data Classification Good Afternoon We at Rockefeller University are considering how to move forward with the elusive goal/initiative of data classification, and would like to see how others are addressing this. I would greatly appreciate if you could respond to this brief survey. I will be happy to share the results with anyone who is interested: 1. Do you have a data classification policy on your website or intranet? 2. Do you use any tools to enable your user community to classify their data? If so, which ones? These could be enterprise tools, or even basic tools that are built into other applications or platforms (e.g. Office365, Box, etc.) 3. Do you enforce this policy, or in any way require data to be classified? Thanks , and I wish everyone a wonderful labor day, Marty , Thank You, Marty Leidner, CISSP Chief Information Security Officer The Rockefeller University Information Security 212-327-7372 http://it.rockefeller.edu/information-security<https://urldefense.proofpoint.com/v2/url?u=http-3A__it.rockefeller.edu_information-2Dsecurity&d=DwMGaQ&c=FcGMiTDX8FO-KAYppnKNhFgYxz2wb40a2pni_SOyB0w&r=Vq9qYfqO8Vk62Gu82XKXEw&m=oK2FoTFBYGjcEuR-_79kU84u16thm2XsD_uHupEImA0&s=DtOgpAhBuE26l0IDC399KG2N8aGt1o9OIyctOLKw7ss&e=> Protector of the cyber realm ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMGaQ&c=FcGMiTDX8FO-KAYppnKNhFgYxz2wb40a2pni_SOyB0w&r=Vq9qYfqO8Vk62Gu82XKXEw&m=oK2FoTFBYGjcEuR-_79kU84u16thm2XsD_uHupEImA0&s=HNTrpx0TiIcmgJ1WvVWfi8soj2-dgTQO14NMNgj250c&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMGaQ&c=FcGMiTDX8FO-KAYppnKNhFgYxz2wb40a2pni_SOyB0w&r=Vq9qYfqO8Vk62Gu82XKXEw&m=oK2FoTFBYGjcEuR-_79kU84u16thm2XsD_uHupEImA0&s=HNTrpx0TiIcmgJ1WvVWfi8soj2-dgTQO14NMNgj250c&e=> ---------------------------------------------------------------------- Notice from Melbourne Business School Ltd The information contained in this e-mail is confidential, and is intended for the named person's use only. It may contain proprietary or legally privileged information. If you have received this email in error, please notify the sender and delete it immediately. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Internet communications are not secure. You should scan this message and any attachments for viruses. Melbourne Business School does not accept any liability for loss or damage which may result from receipt of this message or any attachments. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Data Classification Marty Leidner (Aug 30)
- Re: Data Classification Ullman, Catherine (Aug 30)
- Re: Data Classification Robert Smith (Aug 30)
- Re: Data Classification Jim A. Bole (Sep 03)
- Re: Data Classification Barton, Robert W. (Sep 03)
- Re: Data Classification WALTER KERNER (Sep 03)
- Re: Data Classification Robert Smith (Aug 30)
- Re: Data Classification Ullman, Catherine (Aug 30)
- Re: Data Classification Telfer, Will (Aug 30)
- Re: Data Classification Ken Connelly (Aug 30)
- Re: [External] [SECURITY] Data Classification Gregg, Christopher S. (Sep 03)
- <Possible follow-ups>
- Re: Data Classification Williams, Matthew (wilmh) (Sep 03)
- Re: Data Classification Darren Morris (Sep 03)
- Re: Data Classification Brad Judy (Sep 03)