12554 evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 b. Agencies private information or personnel information stored in database or tape drive or in any media c. Regular business information processed in applications d. Static and dynamic information in the website of the agency e. Communication/correspondence, perception and knowledge f. Information that’s processed in the Intranet of the agency/government g. Information that’s processed in the internet of the agency/government h. Information that’s processed in the extranet (9) Different state of information needs different security mechanism. This shall be done considering the importance of the information and classifying information as required. It is much easier and convenient to impose security controls for same group of information depending on their nature of importance. Every agency shall find out the states of its information and define the security policy along with the classified information. (10) Information Classification Information of different types needs to be secured in different ways. Therefore a classification system is needed, whereby information is classified, a policy is laid down on how to handle information according to its class. Depending on the classification, security mechanisms are enforced on systems for handling information accordingly. Information classification ensures that information receives an appropriate level of protection. Information should be classified to indicate the need, priorities, and expected degree of protection when handling the information. Information has varying degrees of sensitivity and criticality. Some items may require an additional level of protection or special handling. An information classification scheme should be used to define an appropriate set of protection levels and communicate the need for special handling measures. (11) Information can be classified in terms of its value, legal requirements, sensitivity, and criticality to the country or to the agency. Classification systems vary from country to country, agency to agency. In most countries, the common classification has five levels as mentioned below: a. Top Secret b. Secret c. Confidential d. Restricted e. Public or Unclassified