Information Security Fundamentals, 2nd Edition

296  ◾  Information Security Fundamentals

Critique of Example No. 1—this is an actual classification policy (very high level)

for the executive branch of a national government (Figure 12.7). ere is little

here to help the average user. is is an example of a program or general policy

statement; however, a topic-specific policy statement may have been more ben-

eficial. Perhaps the next two examples will provide more information.

Critique of Example No. 2—the policy seems to stress competitive advantage

information in its opening paragraphs (Figure 12.8). It does not seem to

address personal information about employees or customers. It does provide ...