ABSTRACT

Information, wherever it is handled or stored (e.g., in computers, file cabinets, desktops, fax machines, voice-mail) needs to be protected from unauthorized access, modification, disclosure, and destruction. All information is not created equal. Consequently, segmentation or classification of information into categories is necessary to help identify a framework for evaluating the information’s relative value and the appropriate controls required to preserve its value to the company.