====== Data classification ====== ===== Examples ===== ==== ~DICK ==== This is the **Tilde** //**D**ata and **I**nformation **C**lassification **K**it// (~DICK). ^ Colour ^ Name ^ Description ^ Security Features ^ Access Credentials | | ⬜️ clear | PUBLIC | Data which is publicly accessible and can be shared freely | None | None | | 🟩 green | HIDDEN | Data which is accessible after public registration | In-Transit encryption | Login/password | | 🟦 blue | PRIVATE | Data accessible after registration and access delegation | In-Transit encryption | Login | | 🟧 orange | INTERNAL | Only for people inside the organisation | In-Transit encryption | Login (password/public key), trusted devices (2FA) | | 🟥 red | CONFIDENTIAL | Only for a select group of people in the organisation (ACL) | In-Transit encryption, at-rest encryption | password-protected public key | | 🟪 purple | SECRET | Only for specific persons with clearance | In-Transit encryption, at-rest encryption, signature | password-protected public key, 2FA | All colour-coded information has to be tagged with the name to allow colourblind people to assess the level of confidentiality. ===== Models ===== * Harvard Data Tag Model ===== Further information ===== * [[https://www.digitalcraftsmen.com/have-you-implemented-data-classification-yet/|Have you implemented data classification yet?]] (digitalcraftsmen.com, 2019) * https://itprosec.com/index.php/2020/01/25/itprosec-data-classification-and-control-process/ * https://lab.getapp.com/survey-research-small-business-data-security/