RIT Information Classifications
All information at RIT is classified based on both the degree of confidentiality it requires, and the degree of availability and integrity it requires. To quickly determine the appropriate classification for a specific type of information, check out our RIT Information Classification Matrix.
Confidentiality Classifications
RIT Confidential
A classification for information that is accessed or communicated on a need-to-know basis, and because of legal, contractual, ethical, or other constraints, may not be accessed without specific authorization.
- All private information and personal identifying information, as defined by New York State, is classified as RIT Confidential and should be treated as such.
- Any information, of which the unauthorized disclosure could result in significant harm to the Institute, Institute processes, or to individuals, is also classified as RIT Confidential.
RIT Internal Use Only
An optional classification for information that may be accessed or communicated by all RIT faculty, staff, students, alumni, contractors, and business associates without restriction for the conduct of Institute business.
Public Information
A classification for information that may be accessed or communicated by all RIT faculty, staff, students, alumni, contractors, and business associates without restriction. Public Information consists of information that is not Confidential or Internal Use Only, but may be Operationally Critical.
Third-Party Confidential
There are times when you may have confidential information in your custody that belongs to a third party, such as a business partner. If the information has been marked confidential by the third party, you should treat it as RIT Confidential information, or more restrictively if required by the third party.
- " Confidential information created in conjunction with a third party, such as a research partner, should be classified as Third-Party Confidential.
Availability/Integrity Classification
RIT Operationally Critical
An additional classification for information that is essential to the daily operations of the Institute, requires a high level of availability and integrity, and may be of any level of confidentiality or sensitivity. RIT Operationally Critical Information may also be:
- RIT Confidential, such as student identification information that is necessary to process financial aid transactions.
- RIT Internal Use Only, such as a routine policy or procedure that is critical to your job function but has no level of confidentiality.
- Public Information, such Institute class schedules or awarded degrees and dates.
Confidentiality and integrity categories are not mutually exclusive. For example:
- Information may be both RIT Operationally Critical and RIT Confidential, or both RIT Operationally Critical and RIT Internal Use Only.
- Information cannot be both RIT Confidential and RIT Internal Use Only.
