Problems Encountered in Trying to Meet Information Protection Goals

At Solar Systems, Inc., the manager in charge of Information Protection makes use of all possible channels to get the word out about labeling requirements. Some employees either do not understand, forget about, or ignore the requirements. Even when labels are properly applied, the information is not always properly handled, stored, and distributed. For example, reports trickle back that even Registered information (which only a limited list of people should see and nobody but the originator should copy) is sometimes found unattended next to copy machines and printers, in break rooms, and lobbies.

• The legal department wants a better way to ensure that information is properly labeled without relying totally on employee compliance

• The system administrators wants a better way to control:

  • Who can see or modify sensitive information,

  • Which information is printed on which printers,

  • How printer output is handled, and

  • How information at various levels of is distributed internally and externally via email