CERN has just released, for internal distribution only, the Data Classification Policy document, which establishes a framework for classifying professional data entrusted to or originating from the Organization. The objective of classification is to provide persons dealing with information with a concise indication of its level of security and access, thus allowing them to decide whether specific handling is required, such as appropriate technical measures and controls for protecting the data and for managing the life cycle of the data. For this purpose, only information that requires specific handling needs to be explicitly categorised. The Policy applies to
- all professional data processed by or on behalf of CERN, in any form or format; and
- all persons and services that process data at CERN or on behalf of CERN.
The full document in English is available on CDS. The French translation will be available soon.