Information sensitivity 5316476 208598074 2008-04-27T20:27:09Z Cahk 1218696 replace globalize tag with {{globalize/USA}} {{Mergeto|Classified information|date=July 2007}} {{globalize/USA}} '''Sensitive information''' is [[information]] or [[knowledge]] that might result in loss of an advantage or level of security if revealed ([[disclosure|disclosed]]) to others who might have low or unknown trustability and/or indeterminable or hostile intentions. Loss, misuse, modification or [[access|unauthorized access]] to sensitive information can adversely affect the [[privacy]] of an individual, [[trade secret]]s of a business or even the [[national security|security]], [[internal affairs|internal]] and [[foreign affairs]] of a nation depending on the level of sensitivity and nature of the information. == Types of sensitive information == {{Refimprove|date=July 2007}} The term [[classified information]] generally refers to information that is subject to special security classification regulations imposed by many national governments. The term ''Unclassified'' as used in the table below refers to information that is not subject to security classification regulations. {{Cleanup-list|date=December 2006}} <table> <tr> <th style="text-align:center;background:#FFFFFF;padding:1ex;border:1px solid #CCCCCC;"> <h4>N<br />o<br />n<br />-<br />c<br />l<br />a<br />s<br />s<br />i<br />f<br />i<br />e<br />d</h4> </th><td> <h5 style="background:#FAFAFA;border:1px solid #CCCCCC;">Public information</h5> <div style="border:1px solid #CCCCCC;padding:3ee;background:#FAFAFA;"> This refers to information that is already a matter of public record or knowledge. For public information, further disclosure '''can do no harm'''. </div> <br /> <h5 style="color:#00CC99;background:#FAFAFA;border:1px solid #CCCCCC;">Personal information</h5> <div style="border:1px solid #CCCCCC;padding:3ee;background:#FAFAFA;"> This is information belonging to a private individual, but the individual commonly may share with others for personal or business reasons. This generally includes contact information such as addresses, telephone numbers, e-mail addresses, and so on. It may be considered a breach of privacy to disclose such information, but for most people its disclosure is not considered a serious matter. However, there are situations in which the release of personal information could have a negative effect on its owner. For example, a person trying to avoid a stalker will be inclined to further restrict access to such personal information. </div> <br /> <h5 style="color:#3399CC;background:#FAFAFA;border:1px solid #CCCCCC;">Private information</h5> <div style="border:1px solid #CCCCCC;padding:3ee;background:#FAFAFA;"> Information is ''private'' if it is associated with an individual and its disclosure might not be in the individual's best interests. This would include a broad range of information that could be exploited to cause a person damage. A person's [[Social Security number|SSN]], credit card numbers, and other financial information should be considered private, since their disclosure might lead to [[crime]]s such as [[identity theft]] or [[fraud]]. Some types of private information, including records of a person's [[Health Insurance Portability and Accountability Act|health care]], education, and employment may be protected by [[privacy]] laws in some cases. Disclosing private information can make the perpetrator liable for civil remedies and may in some cases be subject to criminal penalties. </div> <br /> <h5 style="color:#CC0000;background:#FAFAFA;border:1px solid #CCCCCC;">Routine business information</h5> <div style="border:1px solid #CCCCCC;padding:3ee;background:#FAFAFA;"> This includes business information that is not subjected to special protection and may be routinely shared with anyone inside or outside of the business. </div> <br /> <h5 style="color:#CC0000;background:#FAFAFA;border:1px solid #CCCCCC;">Confidential business information</h5> <div style="border:1px solid #CCCCCC;padding:3ee;background:#FAFAFA;"> ''Confidential'' business information refers to information whose disclosure may harm the business. Such information may include [[trade secret]]s as described in the "[[Economic Espionage Act of 1996]] ({{UnitedStatesCode|18|1831|1839}})". In practice, it may include sales and marketing plans, new product plans, and notes associated with patentable inventions. In publicly held companies, confidential information may include "insider" financial data whose disclosure is regulated by the [[United States Securities and Exchange Commission]]. </div> <br /> <td> </tr> <tr> <th style="text-align:center;background:#CC0000;padding:1ex;"> <h4>C<br />l<br />a<br />s<br />s<br />i<br />f<br />i<br />e<br />d</h4> </th> <td> <h5 style="background:#99CCFF;text-align:center;">RESTRICTED</h5> <div style="border:1ex solid #99CCFF;padding:1em;background:#E5F2FF;"> * Level 2 (light blue) * requires some protection * requires level 2 security clearance or higher * public disclosure '''could have undesirable effects or do some harm'''. </div> <br /> <h5 style="background:#3366FF;text-align:center;">CONFIDENTIAL</h5> <div style="border:1ex solid #3366FF;padding:1em;background:#CBD8FF;"> * Level 3 (blue) * requires protection * requires level 3 security clearance or higher to access * unauthorized disclosure '''could damage national security''' e.g. compromise information that indicates the strength of armed forces or disclosure of technical information about weapons, such as performance characteristics, test data, design, and production data. </div> <br /> <h5 style="background:#CC0000;text-align:center;">SECRET</h5> <div style="border:1ex solid #CC0000;padding:1em;background:#FFCCCC;"> * Level 4 (red) * requires substantial protection * requires level 4 security clearance or higher to access * unauthorized disclosure '''could seriously damage national security'''. * Wrongful disclosure could lead to a disruption of foreign relations, impair a program or policy directly related to national security, reveal significant military plans or intelligence operations, or compromise significant scientific or technological development relating to national security. * most classified information falls into this category * penalty can be a large fine and/or a 5 year to [[life imprisonment]] sentence </div> <br /> <h5 style="background:#FF6600;text-align:center;">'''TOP SECRET (TS)'''</h5> <div style="border:1ex solid #FF6600;padding:1em;background:#FFCC99;"> * Level 5 (orange) * requires the highest degree of protection * requires level 5 security clearance * unauthorized disclosure '''could severely damage national security''' * wrongful disclosure could lead to war against a nation or its allies, disrupt vital relations, compromise vital defense plans or cryptologic and communications intelligence systems, reveal sensitive intelligence operations, or could jeopardize a vital advantage in an area of science or technology. * penalty can range from 5 years to [[life imprisonment]] or even the [[death penalty]] if considered [[treason]]. </div> <br /> <h5 style="background:#FFDD00;text-align:center;">'''"ULTRA SECRET" or [[Sensitive Compartmented Information|SCI]]'''</h5> <div style="border:1ex solid #FFDD00;padding:1em;background:#FFF6BF;"> * Level 6 (yellow) * requires exceptionally high or special protection * requires level 5 security clearance and special (Q) clearance and or invitation. * unauthorized disclosure '''could existentially damage national security, international stability or wartime advantage''' * wrongful disclosure could lead to loss or prolongation of a war, provide enemies with secret weapon technology or inform them of compromised top secret information. * penalty will most likely be [[capital punishment]] due to [[treason]]. </div> </td></tr></table> Information can be '''reclassified''' to a different level or '''declassified''' (made available to the public) depending on changes of situation or new intelligence. ==Sensitivity Indicator in the USA== In the intelligence community the '''sensitivity indicator''' (aka. sensitivity label) specifies the [[Classified information|level of secrecy]] of a [[project]], [[document]] or piece of information by its relevancy to [[national security]]. Only those with appropriate '''[[security clearance]]''' can access information of certain sensitivity and might face additional '''special access restrictions'''. The indicator can also be the '''name of a classified project''' such as "[[Project Blue Book]]" or "[[ULTRA]]", further restricting access to or handling of information. ==See also== * [[Mandatory Access Control]] * [[Espionage]] * [[RFC1327]] * [[Federal Standard 1037C]] and the [[National Information Systems Security Glossary]] * [[Seal of the Confessional]] ==External links== * [http://www.archives.gov/isoo/ ISOO] * [https://www.cia.gov/library/publications//cia_today/ciatoday_05.shtml CIA] * [http://www.fbi.gov/clearance/securityclearance.htm FBI Security Clearance FAQ] * [http://www.bundestag.de/parlament/funktion/gesetze/go_btg/anlage3.html Germany] [[Category:Information sensitivity| ]] [[Category:Information]] [[Category:Data security]] [[fr:Information sensible]] [[pl:Dane drażliwe]]