Security classification for documents

Sensitive information: A review and research agenda

“…Although most of the literature presumes rationality in decision making, research into interpretations of information technology has indicated that the same systems can be interpreted differently (Brown, 1995; Kaarst‐Brown & Robey, 1999; Orlikowski, 1991). Similar interpretations, referred to as sensitivity judgments, have been suggested as critical in proposed systems used to classify electronic documents (Eloff et al, 1996). Such classifications are: “…Highly dependent on human judgment, because it requires someone to interpret the content of the document” and that the content “…must be interpreted and categorized according to its sensitivity” (Eloff et al, 1996, p. 58).…”

“…Similar interpretations, referred to as sensitivity judgments, have been suggested as critical in proposed systems used to classify electronic documents (Eloff et al, 1996). Such classifications are: “…Highly dependent on human judgment, because it requires someone to interpret the content of the document” and that the content “…must be interpreted and categorized according to its sensitivity” (Eloff et al, 1996, p. 58).…”

“…Another is to focus on the information itself. As a preliminary step in this focus, security experts have suggested that organizations need to determine the protection needs of the information, that is, they need to determine which information requires the most protection and which the least protection based on the sensitivity of the information (British Standards Institute, 2000; Eloff, Holbein, & Teufel, 1996). These authors and others (Parker, 1996; Peltier, 1998) have also emphasized the importance of a classification system for information to realize this goal.…”

“…Beghtol goes on to look in depth at Van Dijk's theory of aboutness. Included are two concepts that relate directly to the classification for security purposes outlined by Eloff et al (1996). The first is the concept of intertextuality, whereby the textuality of any one text arises from the interaction with other texts.…”

Document access control in organisational workflows

“…According to O'Meara, a dynamic and intelligent document system is helpful to resolve the challenging business environment and to support high-quality decision making (O'Meara, 2000). There are two categories of documents: those that contain highly structured information and those that contain more loosely structured information (Eloff et al, 1996). Examples of highly structured information are the information that is contained in contracts, purchase orders, invoices and airline reservations, while the information contained in letters, notes and reports is considered as loosely structured information.…”