Vince Cancilla
Flint Learning Solutions
Insurance Company Pilot
Information
Classification
TRAINING SESSION
VISION STATEMENT
Welcome!
This presentation will give you a solid introduction to the principles of INFORMATION CLASSIFICATION in a corporate context — specificially within our info-sensitive Insurance industry.
Building a secure future based on these clear principles, and leveraging the best of modern technology, will help ensure a safe and productive future for ourselves and our clients.
LEARNING & PERFORMANCE OBJECTIVES
This training module will equip you with the knowledge and skills needed to safely and efficiency identify and classify information you encounter on the job, and know how best to safeguard and action it. You will be able to:
1 — RECOGNIZE AND CLASSIFY TYPES OF INFO in terms of the sensitivity level of the info you encounter on the job
2 — TAKE OWNERSHIP through clear guidelines and practices on how to handle the various types of information, which will eliminate guesswork
3 — PREVENT INFORMATION LEAKAGE by applying these classification principles and procedures
DEFINING OUR TERMS
TERMS
&
DEFINITIONS
WHAT IS INFORMATION?
Information can take many forms, and can include numerical or written data, code, hard copy print or digital media, audio-visual media, and more.
It can relate to many overlapping categories in our business environment:
- Procedures and policies
- Methodological practices
- Customers, employees, suppliers and contractors, agents, etc.
- Can include trade secrets, software, or other sensitive corporate content
LEVELS OF INFO: CLASSIFICATION
PUBLIC
This info is the LOWEST LEVEL and can be accessed and consumed by anyone (i.e. website articles, annual reports, advertising)
INTERNAL
This info is for INTERNAL USE only, but is not necessarily of a highly sensitive nature (email addresses, user IDs, Org Charts, PPTs, etc.)
LEVELS
OF
INFO
CONFIDENTIAL
This info falls into 2 categories:
- NON PII — For business purposes only (budgets, process docs, policies, guidelines, and standards)
- PII (Personally Identifiable) — Combos of critical data (Name + SIN number, birth date, credit card info, etc.)
HIGHLY RESTRICTED
This info is for LIMITED USE only, restricted to a few select people
YOUR
RESPONSIBILTIES
TAKE OWNERSHIP
- Be vigilant in always practicing identification principles
- If unsure, always classify info to the higher level of risk
BE DISCERNING
- Carefully evaluate and understand the content of the info and clearly classify it before sharing it
PROTECT AND SAFEGUARD
- By following the principles and practices outlined in this traning module, you will protect yourself, your peers, our clients, and the company at large, and safeguard both people and information!
TOOLS
FOR INFO
CLASSIFICATION
MICROSOFT INFORMATION PROTECTION (MIP)
- A handy toolbar incorporated into your MS Office Suite, this tool will allow you to easily and quickly classify documents and data to the appropriate info level
- Simply click the button that matches the classification level of the information to assign it to the file, email, document, etc.
PRACTICING WITH YOUR KNOWLEDGE
LET'S TEST YOUR KNOWLEDGE — ACTIVITY BASED LEARNING
- Now that you understand the levels and principles of Information Classification, it's important to have some hands-on practice to apply your skills and knowledge with real-world data
- The following SCAVENGER HUNT ACTIVITY will have 3 components
PRACTICE
&
APPLICATION
SORT AND
CLASSIFY
INFO ITEMS
SHARE AND
COLLABORATE ON
RESULTS
SCAVENGER HUNT
(RULES AND OBJECTIVES)
DOWNLOAD THE "SCAVIFY" APP
- This app will give you certain checkpoints and info items to collect and classify, including digital items
LOCATE ALL INFO ITEMS (HARD COPY & DIGITAL)
- There are both hard copy (print) items scattered around the office workplace, and also digital files located on the Scavenger Hunt Scavify app.
- When you find an item in the office workplace, LEAVE IT IN PLACE — other people in the group need to find it too.
SORT, CLASSIFY, AND COLLABORATE
- Assign each info piece a classification from the 4 levels
- Regroup and share and compare your results
MEASURING LEARNING & PERFORMANCE OBJECTIVES
EVALUATE YOUR PERFORMANCE ON THE FOLLOWING:
MEASURING
PERFORMANCE
LOCATING AND IDENTIFYING
- Were you able to locate all the items?
- Were you able to identify each item clearly to one of the 4 levels?
- Did you err on the side of caution for any items that were unclear (level them up)?
- Were you able to leverage the use of the required technology well? (Scavify app, etc)
SPEED AND ACCURACY
- Did you complete the tasks in the alloted time?
- Was classifying the info according to the principles easy and fluid for you?
- Did you struggle to find any items, use tech, or make classification decisions?
- Were you accurate?
QUESTIONS & ANSWERS
Any questions or comments?
CONCLUSION