RE: Info Classification Project Scoping

Hi Renato,

In my opinion, info classification should be done based on criticality
of risk to the particular information. Scope of the project should be
the medium, high and very high criticality information. This may be
further sub-divided into any way, may be department wise.

Regards,

Lalit Gupta "LG"
Specialist-Information Security
IT & Security Department
LG Soft India Private Limited

-----Original Message-----
From: Renato Ferro [mailto:renato.ferro@gmail.com] 
Sent: Monday, June 20, 2005 10:08 PM
To: security-management@securityfocus.com
Subject: Info Classification Project Scoping

Dear Security Managers,
What is the best approach in order to compose a scope for a very large
organization information classification project.

Scoping the project by systems and applications, departments, business
units, mainframe or distributed systems? etc.

Any opinions would be helpful.

Thanks,


#####################################################################
This Email Message is for the sole use of the intended recipient(s) and May 
contain CONFIDENTIAL and PRIVILEGED information.
LG Soft India will not be responisible for any viruses or defects or
any forwarded attachements emanating either from within
LG Soft India or outside. Any unauthorised review , use, disclosure or 
distribution is prohibited. If you are not intentded
recipient, please contact the sender by reply email and destroy all
copies of the original message.
#####################################################################