Management of Information Security 3rd Edition by Michael Whitman ,Herbert Mattord

Exercise 3

During Random Widget Works' CIO strategic planning meeting:
CIO Mike Edwards discussed and expanded on the details of how the IT division would enable RWW to achieve each of its strategic goals. As he was finishing his review of the document, Mike made a crucial point: "Make sure you don't let this planning document get out. These documents are not to leave the building."
Iris asked, "Shouldn't they be labeled Confidential then?"
"What do you mean, Iris?" Mike asked.
Iris replied, "I've been working on a data classification scheme for RWWalong with the systems administrators. We have a draft that uses three data classification levels for the company. Every piece of information in the company is categorized as Confidential, Sensitive, or Public. This document should be clearly labeled Confidential to prevent it from being released by mistake."
After a moment's thought Mike exclaimed, "Excellent! Please send copies of the draft data classification scheme to all department heads immediately." He turned to Stan, his assistant, and said, "Please have new covers that label this plan as Confidential prepared by noon today, and have one of your people replace each cover with the revised, properly marked cover before the end of business today."
Create definitions of Confidential, Sensitive, and Public for RWW. Develop a list of examples of documents that should be labeled with each classification.