Classification Labels

To get their work done, people at Witivio collaborate with others both inside and outside the organization. This means that content roams everywhere, and when it roams, we want it to do so in a secure, protected way that meets our organization’s business and compliance policies.

Here is the list of classification labels we're using, from the least to the most sensitive:

Level	Label	Emoji	Description & Examples
5	PUBLIC	📢	#public
4	EXTERNAL	🔑	#external
3	INTERNAL	🔐	#internal
2	CLIENT CONFIDENTIAL	💥	#client-confidential
1	COMPANY CONFIDENTIAL	🔥	#company-confidential

Public

1. Information that is not confidential and can be made public without any material implications.
2. Loss of availability due to system downtime is an acceptable risk.
3. Integrity is important but not vital.
4. Material that can be accessed publicly by any anonymous user (unauthenticated).

External

1. Information that is not confidential and can be shared externally without any material implications.
2. Loss of availability due to system downtime is an acceptable risk.
3. Integrity is important but not vital.
4. Material that can be accessed by external non-employees users, such as partners or sub-contractors (authenticated), at the exclusion of clients.

Internal

1. Information is restricted to approved internal access and protected from external access.
2. Unauthorized access could influence our operational effectiveness, cause a significant financial loss, provide a significant advantage to a competitor or cause a significant reduction in customer confidence.
3. Information integrity is vital.
4. Material that can be accessed by any employee (authenticated).

Client Confidential

1. Information received from clients in any form for holding or processing by ourselves.
2. The original copy of such information must not be changed in any way without written permission from the client.
3. The highest possible levels of integrity, confidentiality and availability are vital.
4. Material that can only be accessed by some specific employees (authenticated).

Company Confidential

1. Information collected and used by us in the conduct of our business to employ people, to log and fulfil client orders, and to manage all aspects of corporate finance.
2. Access to this information is highly restricted within the our organisation.
3. The highest possible levels of integrity, confidentiality and availability are vital.
4. Material that can only be accessed by some specific employees (authenticated).