Information Sensitivity Labels

With the introduction of Fleming’s new 6-604 Electronic Information Security Policy & OP #6-604A Information Security Classification Procedure Information Sensitivity labels, (also known as Data Classification labels), have been formally established at the College. Every member of the college community has the responsibility to protect sensitive College information entrusted to them. Using sensitivity labels helps to clearly identify the amount of risk and care that must be taken when handling data. Each sensitivity level has associated handling instructions for things such as labelling, access control, storage and email restrictions.

Please see OP #6-604A Information Security Classification Procedure – Appendix B for full details.

The proper handling of sensitive information can be achieved in your daily work by following these practices and tools:

• For work that requires the use of a desktop/laptop computer, use a Fleming device if you have been provided with one. If not, use Fleming’s virtual desktop service or web-browser-based applications, Office365, Evolve, D2L, etc.
• Use the Outlook mobile app to access email from a personal or College smartphone.
• Label MS Office files and emails using Sensitivity Labels.
• Use Office Message Encryption (OME) email encryption for Confidential emails being sent externally or any Highly Confidential emails.

Avoid these practices to ensure College information is protected at all times:

• Downloading and saving sensitive information to a personal (non-Fleming asset) device. (Use Fleming’s VDI service instead).
• Storing sensitive information in any system or application not provided by Fleming.

Policy & Operating Procedure:

• 6-604 Electronic Information Security Policy
• OP #6-604A Information Security Classification Procedure