Planning the Clearances in a Worksheet
The components of these labels are also assigned to users in clearances.
The worksheet's Clearance Planner in Table 6–5 defines the label components to be used in clearances at SecCompany.
The following key to Table 6–5 lists
the components in descending classification bit order and ascending compartment
bit order:
| | |
REG
| REGISTERED
| CLASS
|
NTK
| NEED_TO_KNOW
| CLASS
|
IUO
| INTERNAL_USE_ONLY
| CLASS
|
PUB
| PUBLIC
| CLASS
|
EMGT
| EXECUTIVE_MANAGEMENT_GROUP
| COMP
|
SALES
| SALES
| COMP
|
FIN
| FINANCE
| COMP
|
LEGAL
| LEGAL
| COMP
|
MKTG
| MARKETING
| COMP
|
HR
| HUMAN_RESOURCES
| COMP
|
ENG
| ENGINEERING
| COMP
|
MFG
| MANUFACTURING
| COMP
|
SYSADM
| SYSTEM_ADMINISTRATION
| COMP
|
P_TEAM
| PROJECT_TEAM
| COMP
|
ALL
| ALL_DEPARTMENTS
| COMP
|
|
Table 6-5 Clearance Planner for
SecCompany | | | | | | | | | | | | |
REG
| EMGT
| ENG
| FIN
| HR
| LEGAL
| MFG
| MKTG
| SALES
| SYSADM
| P_TEAM
| ALL
| Highest possible label, not used *
|
REG
| Assigned to personnel as needed §
|
NTK
| EMGT
| Assigned to EMGT group
|
NTK
| ENG
| Assigned to ENG group
|
NTK
| FIN
| Assigned to FIN group
|
NTK
| HR
| Assigned to HR group
|
NTK
| LEGAL
| Assigned to LEGAL group
|
NTK
| MFG
| Assigned to MFG group
|
NTK
| MKTG
| Assigned to MKTG group
|
NTK
| SALES
| Assigned to SALES group
|
NTK
| SYSADM
| Assigned to SYSADM group
|
NTK
| P_TEAM
| Assigned to P_TEAM group
|
NTK
| ALL
| Assigned to all groups
|
IUO
| Assigned to people with NDAs
|
PUB
| Assigned to anyone
|
|
* The highest possible label in the system consists of the highest classification
and all of the defined compartments. Because no one is permitted to access
all information in all departments, this label is not in the user accreditation
range. No one is assigned this clearance.
§ When working at the REGISTERED sensitivity
label, the user must set permissions to restrict access to everyone except
the owner. UNIX file permissions of 600 and directory permissions of 700 restrict
access.