Minding Your Documents

摘要

Simply stamping "confidential" on documents without a company-wide information classification strategy does little to help employees who work with sensitive data everyday. Employees can become confused as to whether "confidential" applies to all employees, only full-time employees, or anyone with a non-disclosure agreement. Legal and IT must be more proactive and prevent data loss before it leads to loss of time, money, reputation and customer trust. Information classification can weave information management - together with business process, risk management and implementation - into the IT infrastructure. When adopting a new information classification strategy, start by establishing a basic system of marking information with both the sensitivity of the material and its intended audience. Organizations using a simple binary information classification system don't address the risks and needs of the business ecosystem.