Baylor>ITS>Security>Safe Computing>Data Classification Guide

Baylor University Data Classification Guide

Data Classification:
 Government Classified
Risk from Disclosure: High
Description: Data owned and classified by the U.S. Federal government
Examples: Government classified data (Confidential, Secret, Top Secret)

Data Classification: Restricted
Risk from Disclosure: High
Description: Data for which an unauthorized disclosure is expected to have a severe or catastrophic effect on Baylor's operations, assets or individuals.
Examples: • Social Security Number
• Credit Card Number**
• Driver's License Number
• Credential for University Systems
• Electronic Protected Health Information
• Bank Account number

Data Classification: Protected
Risk from Disclosure: Moderate
Description: Data for which unauthorized release is expected to have a serious adverse effect on Baylor's operations, assets or individuals.
Examples: • Educational Records as defined by FERPA
• Passport Data
• University Intellectual Property
• Human Resources data
• Protected Data related to research (IRB)
• University Financial Information

Data Classification: Non-Public
Risk from Disclosure: Low
Description: Data for which unauthorized disclosure is expected to have limited effect on Baylor's operations, assets or individuals.
Examples: • University ID number
• BearID
• Any university data not otherwise categorized

Data Classification: Public
Risk from Disclosure: None
Description: All public data
Examples: General access data from the university website, press releases, and other public sources

**Credit card numbers may not be stored electronically. For more information see https://www.baylor.edu/pci/index.php?id=73329

Special considerations - The classification table only provides general guidance on the minimum level of risk of for a data category. External regulations, contracts and/or use cases may increase the level of risk and thus categorization.

Data Descriptions adapted from FIPS PUB 199 - https://csrc.nist.gov/publications/fips/fips199/FIPS-PUB-199-final.pdf

Reviewed February 27, 2014

Search Services