Integrity The integrity of data means the guarantee of the correctness, completeness, up-to-datedness and authenticity of data and absence of unauthorised alterations. I0: Source of information and time of changes are not important I1: It should be possible to identify the source of information and time of changes I2: Source of information and time of changes is identified and periodically checked I3: Authenticity and integrity should be provable to third party. Confidentiality The confidentiality of information means access to the data only for authorised persons or technical means. C0: Public information. Classification label: “Public”. C1: C1 Restricted – for internal use; material whose disclosure would cause light to moderate damage to the affected party. Classification label: “Internal” C2: C2 Restricted – access for defined users, roles or user groups, according to specific rules; material whose disclosure would cause serious damage to the affected party (e.g. HR data, sensitive constituent data, etc). Classification label: “Limited Access” C3: C3 Restricted–confidential information with access limited to a very small set of persons; material whose disclosure would cause severe damage to the affected party (Board/executive/minister level management changes, decisions etc.). Classification label: “Restricted” C4+: National Security Markings (Confidential, Secret, Top Secret)2 Worked Examples A government website publishing information classified as ‘Public’ can be rated with the following security ratings i.e. Confidentiality=C0, Availability=A1, However since it is a Government website, the integrity ratings should be high i.e. Integrity=I2 This would yield a Security classification of M Government database containing biometric information of its citizens and residents can be rated with the following security ratings i.e. Confidentiality=C2, Availability=A3 and Integrity=I3 This would yield a Security level of H 2 Use of National Security Markings are not covered within this document 9 NATIONAL INFORMATION CLASSIFICATION POLICY