On Nov 15, 2007, at 9:02 AM, Eric Weston wrote:
> Does anyone know where there is info about what is regarded as
> "sensitive" data, according to MSU? We have been asked to identify
> where
> we store sensitive data, but I find it difficult to determine what
> data
> is regarded as sensitive. Everyone is very willing to give their
> opinions regarding what is sensitive and what is not, but I've not
> been
> able to get the official MSU stance. The one type of data that I've
> heard to be acknowledged as sensitive is web logs containing IP
> addresses. Is there an official document somewhere that clarifies this
> matter?
There's a boatload of information on it, if you start here: http://computing.msu.edu/msd/
you should be able to find what you're looking for, and maybe more
specifically:
http://computing.msu.edu/msd/documents/Securing_Enterprise_Data_at_MSU_w_ISO_17799_checklist_14_Apr_07.pdf
./mk
--
Matt Kolb <[log in to unmask]>
Academic Computing & Network Services
Michigan State University
|
