Overview

UC Davis IET has instituted a data classification process consistent with the University of California BFB-IS-3: Electronic Information Security to protect user confidentiality and maintain the integrity of all data created.

IET is using the process outlined below to manage and maintain data classification information for data systems hosted in the data center.

Data Classification Process for Data Hosted by Information and Educational Technology (IET)

UC Davis IET has instituted a data classification process consistent with the University of California BFB-IS-3: Electronic Information Security to protect user confidentiality and maintain the integrity of all data created.

IET is using the process outlined in this document to manage and maintain data classification information for data systems hosted in the data center.

The following sources of information are referenced within this document.

1. BFB-IS-3: Electronic Information Security
2. Classification of Information and IT Resources                          
3. UC Protection Level Classification Guide
4. UC Availability Level Classification Guide
5. Unit & ISO Partners
6. UISL Duties

Classification Process

Data hosted in IET data centers, either at Quest or on the UCD campus, must be classified according to Classification of Information and IT Resources, UC Protection Level Classification Guide, UC Availability Level Classification Guide. Unit & ISO Partners (Unit Information Security Leads) will use these resources to identify the types of data, protection level (indicate P4, P3, P2, or P1) and availability level (indicate A4, A3, A2, or A1).

Adding a New System to a Data Center

If you’d like to add a new system to the IET data center please classify your data when you complete the virtual machine request form. Please use the process in Figure 1 below.

Figure 1: Provide data classification information for new systems added to the data center

You need to work with the UISL assigned to your department to update your data classification inventory annually. Please notify your UISL when you make changes so that they can make annual updates to the data classification inventory. Please use the process outlined in Figure 2 below.

Figure 2: Update Data Classification Inventory

UISL Duties

According to responsibilities outlined in UISL Duties and in response to prior audits, the Unit Information Security Lead (UISL) is responsible for updating the IET Data Center Data Classification Inventory annually.