Fill and Sign the Information Security Policies Learn on Demand Systems

9.02[h] Information and Document Control Policy SCOPEThis policy applies to all information of a confidential, sensitive, or proprietary nature. It covers information generated by XYZ Corporation, as well as sensitive data held by the Company on behalf of others. The only exceptions are (1) information belonging to others which the Company possesses pursuant to an agreement to protect it in a different way; and (2) government classified data, which must be handled according to federal regulations. If you have any doubt as to the rules that apply to particular data, see ___________________________________. This policy applies to information stored in whatever form, whether on paper or in some medium of electronic storage, such as computer files. RESPONSIBILITY Central responsibility for implementation and review of this policy resides in __________________________________. Each Group Director is responsible for implementation of the policy within his or her group. Any questions regarding this policy will be resolved by _______________________. CLASSIFICATION All covered information will be classified as either "CONFIDENTIAL" or "RESTRICTED." "RESTRICTED" information is that which is extremely sensitive, the release of which would cause especially significant harm to the Company. All other competitively sensitive information will be designated "CONFIDENTIAL." LABELING All documents containing covered information must be labeled with the proper classification either by means or a stamp or pre-printed form. The label should be prominent. Where practical, it should be printed in red. E-mail on the Company's intranet should be labeled using the menu feature marked "confidential." Other e-mail and faxes should be labeled very prominently. Electronically stored data must be labeled physically on media containers, as well as in the code itself, so that the label appears in output form when the information is viewed or otherwise retrieved from the system. CONTROLS All covered information must be distributed or made available only to those who have a need to know it. RESTRICTED information documents must be numbered and distribution must be logged; such documents may not be copied except by the originator and then only in a way that assigns a new and unique number to the copy. RESTRICTED documents must be kept in secure file facilities and must be distributed in sealed envelopes labeled appropriately. All numbered documents must be returned to the originator when their use by others is no longer needed. All covered information must be disposed of in a secure fashion, either by shredding at one of the several facilities provided by the Company for that purpose, or by the ______________________ service with which the Company has contracted for controlled pickup and disposal.