Information Classification Policy

Information Classification Policy

SOC2 CertificationNetspective Unified Process
 

This Information Classification and Handling Policy outlines the guidelines and procedures for the management of information classification within the Netspective Communications LLC. [FII-SCF-018-PRI-07]

  • Netspective Communications LLC defines information classifications based on the sensitivity, criticality, confidentiality, privacy requirements, and value of the information.
    • All information assets, whether generated internally or externally, shall be categorized into one of these information classifications: [FII-SCF-009-DCH-14]
      • Restricted
      • Confidential.
      • Internal.
      • Public.
    • When information of various classifications is combined, the resulting collection of information or new information shall be classified at the most restrictive level among the sources.
    • The classification of each information asset is to be reviewed at periodic intervals not exceeding
      nqspInformationAssetPeriod
    • A specific asset classification scheme and related guidelines to be developed for this purpose.
    • Both physical as well as electronic information shall be labeled in accordance with Netspective Communications LLC assets management policy and asset classification scheme. [FII-SCF-016-NET-13]
      • Standard document naming convention
      • Providing information label at the footer of documents
      • Naming of hardware, software, media, equipment’s using a unique number to each asset.
      • Register to show where the hardware, software, media is kept in the stockrooms
    • Documents, hardware items and removable media physical labeling shall include appropriate security classifications in accordance with Netspective Communications LLC assets management. [FII-SCF-003-BCD-02]
    • Electronic labeling for computer-based information shall be introduced at folder level for sensitive (secret) and confidential information in accordance with Netspective Communications LLC assets management.
    • Information assets shall be maintained, handled, stored, transported (or transmitted) and destroyed in accordance with Netspective Communications LLC information labeling and handling procedures associated with the information asset’s classification label.

Approved by
Ajay Kumaran Nair on June 16, 2023 |
Last Updated by
Arun K R on June 16, 2023