At its simplest, protective marking (or classification as it is sometimes referred to) is a way of assigning information to a security label which in turn, relates to a range of pre-defined controls designed to ensure the information is handled properly by all parties in different situations. Not only should the guideline help anyone who is unsure about the best way to handle something, but it will also bring a consistent approach, which is important given the number of organisations who access the Scottish National Infrastructure (SNI) in general.
The guidelines have been written to tie in with local authority and HM Government security standards as far as is possible and to offer assurances to local authorities of the minimum security controls that the SNI will afford to information and in particular, personal information. Obviously the focus is on personal records, but it also covers operational information, which can also have a confidential element to it.
For further information on the Protective Marking Guideline please contact Carol Peters, Information Security Officer at East Renfrewshire Council.
