成人头条

 

 

Morrison Hall

Data Labeling Guide

What is Document Labeling? 

 
Document labeling is the process of attaching metadata or tags to documents or email to signify their sensitivity level, classification, or purpose. These labels provide important information about the document's content, allowing users and systems to understand its significance and handle it appropriately.  

Labels can indicate various attributes of a document, such as its confidentiality level, regulatory compliance requirements, data retention policies, or sharing permissions.  

 

 

Why should documents be labeled? 

Governance: 

By applying consistent labels, WSU can gain insight into what type of data we possess, how it is used and where it is stored. This will help stakeholders make decisions about data handling, access controls and data lifecycle management. 

Risk: 

Labeling helps identify and prioritize sensitive information for protection and access control. Limiting unauthorized access and assisting with data loss prevention. 

Compliance: 

Document labeling supports compliance efforts by ensuring that sensitive information is handled in accordance with applicable laws, regulations and standards such as FERPA, HIPPA, ITAR, PCI-DSS  among others. 

Technical Requirements 

  • WSU connected device or application (i.e. Outlook for mobile) 
  • Microsoft Office 2019 or later 

 

成人头条 Sensitivity Markings 

WSU PUBLIC 

WSU data that specifically prepared and approved for public consumption. 

 

Examples: 

  • Press release 
  • Job Postings 
  • Information on publicly available websites 

 

WSU PRIVATE 

WSU Private Data is intended only for internal University business use with access restricted to a specific workgroup, department, group of individuals, or affiliates with a legitimate need to use or access the data. 

Examples: 

  • Department intranet 
  • Personally identifiable information (PII) 
  • FERPA 

 

WSU RESTRICTED 

WSU Restricted Data is highly sensitive data intended for limited, specific use by a workgroup, department, or group of individuals with a legitimate need to use or access the data. Explicit authorization by the Data Custodian is required for access because of legal, contractual, privacy, or other constraints. 

Examples: 

  • Medical Records 
  • Controlled Unclassified Information (CUI) 
  • Credit Card Numbers 

 

WSU PROPRIETARY 

Proprietary Data is either (1) University Data provided to a third party or (2) third-party data created, received, and/or maintained by the University on behalf of a third party such as an individual, corporation, or government agency. Proprietary Data will vary depending on contractual agreements and/or relevant laws or regulations. 

Examples: 

  • Research Data 
Applying a Sensitivity Label to a Document
  • In Microsoft Office documents, the Sensitivity button is located in the 鈥楬ome鈥 tab of the Ribbon on the upper right section. 

 

 Data1

 

 

 

 

 

  • From here, you will be able to select the appropriate label for the document. In this case, WSU PRIVATE. 

 

 

 

 data2

 

 

 

  

  • Selecting labels from WSU PRIVATE and above will automatically mark the document or e-mail with that label鈥檚 header and footer.  

 

 

 data3

 

 

 

 

Encryption 

Visual Difference 

Encrypted labels will show a 鈥榩adlock鈥 symbol in front of the Shield logo beside the label name.  

 data4

 

External Email Recipients 

Users who receive an encrypted email outside of our organization will be prompted to log into a portal in order to view the email. 

 

  •  data5

For the majority of document labeling, all that is needed is to determine the type of data in the document and then select the appropriate label. 

Thank you for helping make WSU data secure and compliant.