
	Where results make sense

Topic: Sensitive information

	Control and Protection of "Sensitive Security Information" (USDA)
		Information that has been identified and is known by the recipient as SSI shall be safeguarded from disclosure to unauthorized individuals whether or not the material is physically marked.
		Information that is considered sensitive by a responsible authority, or determined to have a high value or information that represents a high risk should be cryptographically protected if it is vulnerable to unauthorized disclosure or undetected modification during transmission or while in storage.
		Sensitive material from other government agencies should be safeguarded from unauthorized disclosure in accordance with this Regulation or provided additional protection in accordance with the specific requirements of the agency providing the sensitive information.
	www.fas.org /sgp/othergov/usda3440-02.html (2919 words)

	Sensitive Security Information
		There appear to be no limits to the type of information that might be gathered or generated as SSI and then sealed.
		Information needed by civic activists or organizations to maintain oversight and challenge local officials on their management of public facilities may be withheld, even when the information’s relevance to any possible terrorist threat is at best tenuous.
		We believe that this authority to withhold public information is a very special trust that must be granted with the greatest care and discretion within each governmental entity and that it should not be extended beyond the responsible government entity.
	www.cjog.net /protest_sensitive_security_inform.html (2603 words)

	AAR: Privacy site: Overview: Who, what & when: Sensitive information
		Sensitive information has additional protection under the Act under NPP 10, which says that generally, an organisation is not allowed to collect sensitive information from an individual unless:
		the individual is incapable of consenting and the information is needed because of a serious and imminent threat to the life or health of the individual.
		Health information is generally considered to be amongst the most sensitive and intimate personal information and it has even more stringent protection under NPP 10.
	www.aar.com.au /privacy/over/seninf.htm (516 words)

	Information sensitivity - Wikipedia, the free encyclopedia
		Sensitive information is information or knowledge that might result in loss of an advantage or level of security if revealed (disclosed) to others who might have low or unknown trustability and/or indeterminable or hostile intentions.
		Loss, misuse, modification or unauthorized access to sensitive information can adversely affect the privacy of an individual, trade secrets of a business or even the security, internal and foreign affairs of a nation depending on the level of sensitivity and nature of the information.
		The term classified information generally refers to information that is subject to special security classification regulations imposed by many national governments.
	en.wikipedia.org /wiki/Sensitive_information (880 words)

	FOIA Post (2002): Guidance on Homeland Security Information Issued
		Government information, regardless of its age, that could reasonably be expected to assist in the development or use of weapons of mass destruction, including information about the current locations of stockpiles of nuclear materials that could be exploited for use in such weapons, should not be disclosed inappropriately.
		Although classified information generally must be declassified within 10 years of its original classification, classification or reclassification may be extended for up to 25 years in the case of information that could reasonably be expected to "reveal information that would assist in the development or use of weapons of mass destruction." Id.
		Information maintained by the Defense Technical Information Center (DTIC) or the National Archives and Records Administration (NARA) also is deemed to have multi-agency equities, i.e., those pertaining to DTIC or NARA and those pertaining to the component agency or agencies that created the information.
	www.usdoj.gov /oip/foiapost/2002foiapost10.htm (1168 words)

	Georgia State-- IS&T Policies & Publications (via CobWeb/3.1 planetlab2.cs.unc.edu) (Site not responding. Last check: 2007-09-10)
		Sensitive information, as identified below, should be stored on serving devices operated within the environment of the University Computing and Communications Services (UCCS) institutional operations center.
		Established procedures for protection and release of sensitive information must be followed regardless of the platform that data is being stored on.
		Sensitive Information on Desktops/Laptops/Workstations: Storage of sensitive information on devices that are not used or configured to operate as serving devices is acceptable if the user responsible for the device takes proper care to isolate and protect files containing that information from inadvertent or unauthorized access or viewing.
	www.gsu.edu.cob-web.org:8888 /~wwwist/sensitiveinformation.htm (511 words)

	Sensitive Security Information (Site not responding. Last check: 2007-09-10)
		It is applied to information about security programs, vulnerability and threat assessments, screening processes, technical specifications of certain screening equipment and objects used to test screening equipment, and equipment used for communicating security information relating to air, land, or maritime transportation.
		When the information is not under the individual's direct physical control, the individual is responsible for ensuring that it is safeguarded and protected so that it is not physically or visually accessible to persons who do not have a need to know.
		Requests for information that are addressed to regulated parties, such as requests under State and local freedom of information or open records acts, should be referred to the TSA Administrator.
	www.dss.mil /training/csg/security/S2unclas/Ssi.htm (1417 words)

	OMB Watch - Administration Gains New Power to Withold 'Sensitive' Information
		This applies to information that has previously been disclosed, which is particularly disturbing because it could lead to the withdrawal of vast amounts of information.
		However, DHS could restrict this information as sensitive but unclassified, leaving communities unaware of plants until they crop up next to their homes, schools, and workplaces.
		However, through use of the sensitive but unclassified categorization, the Bush administration could eliminate vital information for addressing problem areas, claiming reports on budgets, preparedness, and current equipment are potentially useful to terrorists in picking a vulnerable target.
	www.ombwatch.org /article/articleview/1799 (1065 words)

	Information Security: web applications
		Logs containing sensitive information should only be accessible to authorized staff and should not be publicly accessible.
		Files containing sensitive data should be encrypted wherever possible, using strong encryption, or should be transferred as soon as practical to a secured system not providing public services.
		Web sites collecting personally-identifiable survey information must provide on their web page a privacy statement that describes the kind of information that is collected, how it is to be used, and how it may be disclosed.
	www.upenn.edu /computing/security/standards/wwwsec.html (1548 words)

	Schneier on Security: Sensitive Security Information (SSI)
		The information under this category, as defined by a D.C. court, was limited to information related to the safety of air passengers.
		SSI may be effective to hide "sensitive information" from the general public, which probably is exactly the purpose, but I don't believe it is effective to hide it from the bad guys.
		One characteristic of the sort of information protected by this classification is that there are many people not authorized to have the information whom, if it fell into their hands anyway, would do little harm.
	www.schneier.com /blog/archives/2005/03/sensitive_secur.html (6311 words)

	Classified information - Wikipedia, the free encyclopedia
		Classified information is sensitive information to which access is restricted by law or regulation to particular classes of people.
		Information with a Restricted classification is not for general dissemination, but is not classified in the strictest sense of the word - it is often used for controlling the release of reports and other documents until it can be done officially.
		Information relating to the security vetting of an individual is usually classified at the Confidential level even though it has no national security significance, because of the detail that is recorded through the vetting process.
	en.wikipedia.org /wiki/Classified_information (1851 words)

	ASNE - Roadblock: In name of security, government shields access to transportation information
		Indeed, they could potentially be used to prevent the public from obtaining vital information about what is going on at their local airports, seaports and train stations, or about what is being transported on city streets and highways.
		The expansive new language instructs TSA to prohibit disclosure of all information it believes might be âdetrimental to the security of transportation.â With such a broad definition, all but the most clearly unrelated or innocuous information could now be considered âsensitive security informationâ and, therefore, withheld from public scrutiny.
		TSA is empowered to gather and share information with local and state officials who operate air and seaport authorities, and to bind them to confidentiality agreements.
	www.asne.org /index.cfm?ID=5251 (852 words)

	University of Kansas Medical Center Operational Protocol: Personal Identity Information in Electronic Systems
		Access to sensitive information, in both electronic and paper format, should follow the “minimum necessary” principle: an individual should have access only to the sensitive information necessary to accomplish his or her work.
		Copies of sensitive information stored in the central administrative and clinical systems should not be maintained outside of those systems unless the frequency of use of the information is such that disabling the repository would severely impact the ability of the department to conduct its business.
		Physical access to paper documents containing sensitive information should be restricted to those who need the information to perform their responsibilities.
	www2.kumc.edu /ir/operationalprotocols/sensitiveinformation.asp (1304 words)

	Science and Security in the Post-9/11 Environment
		Consisting of declassified but "sensitive" information, the SBU label serves as a means of "preserv[ing] confidentiality without formal classification."[4] The establishment of such a category as "sensitive but unclassified" information has significant implications for scientific research and communication because of potential restrictions on information exchange between scientists, the government, and the public.
		This would authorize the agency's director to withhold information deemed "detrimental to the safety of passengers in transportation, transportation facilities or infrastructure or transportation employees." Openness advocates have expressed concerns that the law would essentially suspend oversight of the TSA.
		The lack of a widely accepted definition of "sensitive" information means there are no standardized criteria for identifying sensitive information warranting removal from public access.
	www.aaas.org /spp/post911/sbu (1117 words)

	"Protected" and "sensitive" information - Information Technology - Miller School of Medicine at the University of Miami (Site not responding. Last check: 2007-09-10)
		The particular ones that apply depend on the kind of information, and on how and by whom the information is being collected, used or disclosed.
		It is common to refer to "sensitive" information, but this is not a legal distinction.
		Some kinds of information that you probably would not think to be sensitive -- something as simple as a person's name or address -- may be subject to legal-regulatory protections depending on the context.
	it.med.miami.edu /x718.xml (1186 words)

	Lawmakers question policy on transportation security information (9/15/04)
		In another example, TSA said certain information related to the electronic screening of checked baggage at airports was SSI when the information had already been reported in the public domain.
		When TSA designates information as SSI, its disclosure is limited by a strict need-to-know basis as determined by the agency, and disclosure restrictions remain in force until revoked by the agency.
		"Although the release of certain sensitive information could put the nation's citizens and infrastructure at risk, the federal government should be mindful of the public's legitimate interest in, and right to know, information related to threats to the transportation system and associated vulnerabilities," they said.
	www.govexec.com /dailyfed/0904/091504c1.htm (649 words)

	Containing Sensitive Information in a Free Society
		The chairman maintained, however, that certain classes of information must be kept secret to protect the security of the country.
		The chairman supports zero tolerance for disclosure of classified information after more narrowly defining what needs to be classified and educating government employees on the risks of disclosure.
		A new legal approach to information leaks must take into account the competing interests of national security and a free society with access to government information.
	www.heritage.org /Research/NationalSecurity/hl903.cfm (1671 words)

	Export Control: Sensitive Subjects List
		The Sensitive Subjects List (SSL) is a compilation of technical subject matter or technologies that is intended to aid the Department of Energy (DOE)-complex in identifying "sensitive" information.
		Some information not related to military, proliferation, or terrorist areas of concern requires protection because the subject areas are business sensitive (proprietary) and prime targets for economic espionage.
		Access to business sensitive (proprietary) information by foreign national employees of a DOE industrial partner is covered by their company's internal procedures.
	www.llnl.gov /expcon/subjects.html (2919 words)

	Congress urged to help make more 'sensitive' information public (5/11/06)
		The top official in charge of establishing information sharing polices for the government told lawmakers Wednesday he believes there could be a drastic reduction in the number of categories used to restrict information from the public, but Congress might have to pass legislation to get it done.
		Most information that is now withheld or would be withheld could then be made public, he added.
		He said there are legal justifications for only 17 categories for withholding information, adding that the administration might have to ask Congress to create a new legal framework if changes are to be made.
	www.govexec.com /dailyfed/0506/051106cdam1.htm (564 words)

	Protecting Sensitive Unclassified Information (Site not responding. Last check: 2007-09-10)
		The term sensitive unclassified information as used here is an informal designation applicable to all those types and forms of information that, by law or regulation, require some form of protection but are outside the formal system for classifying national security information.
		Procedures for safeguarding and controlling the protected information so that it is exposed only to those who have a need to know the information and a duty to protect it.
		Factors affecting the implementation are the degree of sensitivity of the information, nature of the threat to the information, vulnerability of the information, options that are available for protecting the information, and organizational facilities/capabilities for secure handling, storage and transmission.
	www.dss.mil /training/csg/security/S2unclas/Intro.htm (530 words)

	SSI — Sensitive Security Information
		It considered the information sensitive for a number reasons: there was personal information about passengers, there was data that could be considered commercially competitive, and it was investigative information about the safety of air travel.
		A DC court in 1993 said the FAA had the legislative authorization to treat the information as exempt from FOIA.
		In the regulations implementing SSI, the transportation agencies said they intend to gather security-related information from seaports and airports as well as private carriers of both passengers and cargo and that this information will be automatically treated as SSI.
	www.cjog.net /background_ssi_sensitive_security_in.html (361 words)

	Welfare to Work - Desk Aid for Collecting and Using Sensitive Information
		Such information is personal and belongs to the participant.
		The exception to this is information that gives staff reasonable cause to suspect there may be issues of child abuse or neglect.
		Information is shared only within the context of assisting a participant complete their employment plan and only with the participant’s express consent.
	www.ctdol.state.ct.us /weltowrk/sensitive-deskaid.htm (1567 words)

	Sensitive compartmented information facility (via CobWeb/3.1 planetlab2.cs.unc.edu) (Site not responding. Last check: 2007-09-10)
		sensitive compartmented information facility what was going on, to realize that she was the pariah So would I. It reeks." there.
		Sensitive compartmented information facility artist to whom space and perspective wife's decaying body, the engine off.
		Sensitive compartmented information facility his legs heavy, you what was done The Fool came slipping Still.
	sensitive-compartmented-information-facility.gagand.com.cob-web.org:8888 (2406 words)

	Enterprise Systems \| Software Vaults Protect Sensitive Information
		For many organizations that includes information for the next board of directors meeting, human resources data, administrative passwords for servers, and documents containing sensitive company or personnel information.
		One way to secure information, especially on an ad hoc basis, is by using software vaults, which control and audit access to any documents or data they store.
		There are companies [where] their board of directors needs to share information, or their employee and human resources information needs to be shared.
	www.esj.com /Security/article.aspx?EditorialsID=1143 (1249 words)

	HRS - RSS - Security Sensitive Information
		For information on faculty positions, contact the Office of the Executive Vice President and Provost at facultyjobsearch@lists.cc.utexas.edu.
		Departments must complete a Security Sensitive Position Form (PO-13) [PDF; 37K] for all new employees in Security Sensitive positions after an offer is made and before the employee begins work.
		For this reason, any forms that do not have a valid account number, an authorized signature, or other necessary information cannot be processed.
	www.utexas.edu /hr/empl/security_sensitive_info.html (279 words)

	FACTA Disposal Rule Goes into Effect June 1
		The standard for the proper disposal of information derived from a consumer report is flexible, and allows the organizations and individuals covered by the Rule to determine what measures are reasonable based on the sensitivity of the information, the costs and benefits of different disposal methods, and changes in technology.
		The Fair Credit Reporting Act defines the term consumer report to include information obtained from a consumer reporting company that is used – or expected to be used – in establishing a consumer’s eligibility for credit, employment, or insurance, among other purposes.
		Due diligence could include: reviewing an independent audit of a disposal company’s operations and/or its compliance with the Rule; obtaining information about the disposal company from several references; requiring that the disposal company be certified by a recognized trade association; or reviewing and evaluating the disposal company’s information security policies or procedures.
	www.ftc.gov /opa/2005/06/disposal.htm (549 words)

Try your search on: Qwika (all wikis)