Sunteți pe pagina 1din 3

Application

Department/Agency:

OIT-0190 (09/02/2015)
Description

Public

Secure
Asset

apply)

Sensitive
Classification
(check all that
Sensitivity

Criminal Investigation
Homeland Security
Federal Employer Identifiable
Number
Personal Financial
Personal Medical
Personal Identifiable
Social Security #
(check all that apply)

Business
Sensitive Information Type

Other
ial)
BII,
edit

Data?
View or

Yes/No
(e.g. PII,
sensitive

Confident-
Can Users

Low
Moderate
iality

High
Confident-

Low
Moderate
Integrity

High
Low
Potential Loss Impact

Moderate
High

Internet
Asset Classification Inventory Spreadsheet Report

Intranet
Users
How do

system?
(check all
that apply)
Availabilit Access the

Extranet
NJ State Portal
GoToMyPC
Asset Classification Inventory Spreadsheet Report

VPN
Platform

Custom (Code)
Access Control
User Access Controls

Other
Level 1:
No Identity Proofing

Level 2:
Collected

Level 3:
Collected and Verified

Level 4: Collected (in-person) and


(Level of Assurance)
User Identity Proofing

Verified

Knowledge-based Authentication
ID/Password
ID and SMS
One Time Password

ID/Password
and soft token

ID/Password
and hard token
User Credential Types

ID/Password
Page 1 of 3

and biometrics

Other
Department/Agency: Sensitivity Potential Loss Impact Us
Can Users View or
edit sensitive How do Users Access
Data Classification Data Type Access Control
Application Description Data? Confidentiality Integrity Availability the system?
(check all that apply) (check all that apply) Platform
(eg PII, BII, (check all that apply)
Confidential)

Sensitive (PII/Confidential)

Personal Identification

Criminal Investigation

Homeland Security
Personal Financial
(Agency Support)

Personal Medical

Social Security #

NJ State Portal
(Core Mission)

Public Safety/
Non-sensitive

GoToMyPC
Moderate

Moderate

Moderate
Sensitive

Sensitive

Extranet
Internet

Intranet
High

High

High

VPN
Low

Low

Low
Yes/No

Energy Supplemental Program Solar energy program for NJ households Yes Yes Yes Yes Yes Yes Yes Yes
Application

Energy Supplemental Program


Department/Agency:

Description
Platform

Custom (Code)
Solar energy program for NJ households Yes
Access Control

Other

Level 1:
No Identity Proofing

Level 2:
Yes

Collected

Level 3:
Collected and Verified
User Access Controls

Level 4: Collected (in-person)


(Level of Assurance)
User Identity Proofing

and Verified

Knowledge-based Authentication
Yes

ID/Password

ID and SMS
One Time Password

ID/Password
and soft token

ID/Password
and hard token
User Credential Types

ID/Password
and biometrics

Other

S-ar putea să vă placă și