Protecting sensitive systems and data in an open agency

Abstract

This paper focuses on the policy and definitional issues associated with providing adequate and reasonable levels of protection for sensitive systems and data in an agency whose basic charter mandates the open sharing of information and transfer of technology into the market economy. An information model based on current Federal regulatory issuances is presented. A scheme for determining sensitivity levels, based on a categorization taxonomy,is provided.