Standards & Classification
ASU’s Data Classification Standard is a framework for assessing data sensitivity, measured by the adverse business impact a breach of the data would have upon the university and provides a foundation for establishing security requirements for each type of data.
ASU’s Data Classification Standard covers ASU data. University data is information prepared, managed, used, or retained by an operating unit or employee relating to the activities or operations of the university.
Data classification does not alter public information access requirements. The Arizona Public Records Law or federal Freedom of Information Act requests and other legal obligations may require disclosure or release of information from any category.
Considerations for evaluating the potential adverse business impact to the university due to loss of data confidentiality can include:
Loss of critical university operations
Negative financial impact
Damage to the reputation of the university
Potential for legal action
Requirement for corrective actions
To view the entire standard, please visit: Get Protected