SENSITIVE SENSITIVE information requires additional handling care due to its sensitivity or Information with a moderate business impact if compromised or lost ‘medium’ Examples may be: confidentiality business impact government or agency business, whose compromise could affect the level requiring to make decisions or operate, the confidence government’s capacity public’s additional care in in government, the stability of the market place and so on handling commercial interests, whose compromise could affect the competitive process and provide the - opportunity for unfair advantage Must be labelled legal professional privilege SENSITIVE law enforcement operations, whose compromise could hamper or render less useful crime prevention strategies or investigations or adversely affect personal safety personal information, which is required to be safeguarded under the Information Privacy Act 2009, the Public Records Act 2002 or other legislation. Store, handle, archive and disposal - Subject to requirements of the Queensland Information Security Policy (IS18); AND - Store and handle based on risk acceptable to the information owner as outlined in agency Information Security Management System (ISMS); AND - In accordance with authorised retention and disposal schedule issued under the . For minimum requirements: Refer to and The chosen controls must provide sufficient safeguards to adequately protect the information based on the confidentiality level of the information. PROTECTED Must be labelled Information with a confidentiality business impact level, whose compromise ‘High’ PROTECTED could cause actual damage to the State, the Government, commercial Green folder, entities or members of the public. For instance, compromise could: yellow stripe and private entities; endanger individuals’ lives work substantially against government finances or economic and commercial interests; substantially undermine the financial viability of major organisations; and/or impede the investigation or facilitate the commission of serious crime. Information passed by other governments that is marked PROTECTED Cabinet information The dictates security classifications, markings and handling for Queensland Cabinet material.
SENSITIVE Information with a ‘medium’ confidentiality business impact level requiring additional care in handling Must be labelled SENSITIVE SENSITIVE information requires additional handling care due to its sensitivity or moderate business impact if compromised or lost Examples may be: government or agency business, whose compromise could affect the government’s capacity to make decisions or operate, the public’s confidence in government, the stability of the market place and so on commercial interests, whose compromise could affect the competitive process and provide the - opportunity for unfair advantage legal professional privilege law enforcement operations, whose compromise could hamper or render less useful crime prevention strategies or investigations or adversely affect personal safety personal information, which is required to be safeguarded under the Information Privacy Act 2009, the Public Records Act 2002 or other legislation. Store, handle, archive and disposal - Subject to requirements of the Queensland Information Security Policy (IS18); AND - Store and handle based on risk acceptable to the information owner as outlined in agency Information Security Management System (ISMS); AND - In accordance with authorised retention and disposal schedule issued under the . For minimum requirements: Refer to and The chosen controls must provide sufficient safeguards to adequately protect the information based on the confidentiality level of the information. PROTECTED Must be labelled PROTECTED Green folder, yellow stripe Information with a ‘High’ confidentiality business impact level, whose compromise could cause actual damage to the State, the Government, commercial entities or members of the public. For instance, compromise could: endanger individuals’ lives and private entities; work substantially against government finances or economic and commercial interests; substantially undermine the financial viability of major organisations; and/or impede the investigation or facilitate the commission of serious crime. Information passed by other governments that is marked PROTECTED Cabinet information The dictates security classifications, markings and handling for Queensland Cabinet material.
QGISCF-v4.0.0.docx