What are the types and levels of information?

Information is generally classified as follows: Suitable controls need to be applied for protecting the information.

A.

Restricted Information

Information should be classified as Restricted when the unauthorized disclosure, alteration or destruction of that data could cause a significant level of risk to the Organization or its stakeholders (eg Directors, employees, clients, (including patients for Healthcare) and service providers). Examples of Restricted Information include data protected by state or federal privacy regulations and data protected by confidentiality agreements. The highest level of security controls should be applied to Restricted Information.

B.

Private Data

Information should be classified as Private when the unauthorized disclosure, alteration or destruction of that data could result in a moderate level of risk to the Organization or its stakeholders. By default, all Institutional Data that is not explicitly classified as Restricted or Public data should be treated as Private data. A reasonable level of security controls should be applied to Private Information.

C.

Public Data

Information should be classified as Public when the unauthorized disclosure, alteration or destruction of that data would results in little or no risk to the Organization or its stakeholders. Examples of Public data include press releases, Product and service brochures and research publications. While little or no controls are required to protect the confidentiality of Public data, some level of control is required to prevent unauthorized modification or destruction of Public Information.

In another context, Information may also be classified as Strategic, Tactical and Operational. Each of these may have the above sub classifications, i.e, Restricted, Private or Public .

Good luck !!

You may like to visit my website Anil Oberai, C.E.O of Oberai IT Consultancy/ to view my daily articles on Information security & Project management.

Impact on IT organizations, when their employees form a welfare union

IT is a people and knowledge based industry. All employees are matured and educated. Normally, welfare 'unions' are not popular in IT Industry, but even if they are, Management needs to take them into confidence on important matters.. the Union’s welfare measures should be genuine, and the management should recognize them as an extension of the HR. In case of non genuine demands or measures which affect the growth of a company, management should reason it out with the welfare unions that this is going to hinder the growth of the company, and all employees.

After all, welfare of employees is the company’s prerogative, and it should take the welfare unions as a helping hand in genuine measures.

I am an IT Consultant with over 2 decades experience in IT Industry, providing help in areas of Information Security, Project Management, and Process Excellence. For more information, Pl contact me through my website

Anil Oberai, C.E.O of Oberai IT Consultancy

What are the job prospects after a  CAPM certification?

There are 2 aspects of Project Management… The “what” of it and the “how” of it.

CAPM course will tell you the “ what “ of it, the “how” is what the employers are really interested in, so you must get experience in Project management (maybe initially as a Assistant PM or a Senior TL, handling a Team, reporting, Estimation and Costs and Activities monitoring) .

I am sure with above guidelines and focussing on the “how” part of PM , you will be able to successfully apply for the “what” part of PM gained through CAPM course and be successful .

Good luck !!

I am an IT Consultant with over 2 decades experience in IT Industry, providing help in areas of Information Security, Project Management, and Process Excellence. For more information, Pl contact me through my website

https://aniloberai.bogspot.in/

Does ITIL help a sales/presales person?

Does ITIL help a sales/presales person?

Yes, I feel ITIL helps a sales / pre sales person 

The objective should be clear - is the person involved in sales of a company working in the domain where the efficiency of IT services is important for its Top line or Bottom line (read Profitability) ? or Is it that he is trying to change his career to another company where business is run on IT ? or is it that he has heard from somewhere that ITIL is helping in career growth? In all these cases, if a Sales person knows about ITIL, it is going to help him.

For a sales person in FMCG or Financial services or general Administration, it is not going to be of use . The size of organization also matters - for Micro and small enterprises, it will serve as a good understanding exercise, but your organization may not have budget or Time to implement it .

Now that we are clear of the objective, I would like to describe what ITIL is all about :

1. Service Design
2. Service Transition
3. Service Operation
4. Strategy for Improvement of Service

The last thing I would like to advice Sales people is :

a.Getting the objective clear

b.Plan a goal for yourself that after knowledge of ITIL , how is ITIL is important in your career? what are you going to achieve with this knowledge? Qualify organizations from your funnel, into those which could be benefitted with ITIL from their Strengths and weaknesses and then move ahead..

c. You should like selling services

Please remember that not every organization can go in for ITIL , even if they appreciate it initially.

Good Luck !!

I am an IT Consultant with over 2 decades experience in IT Industry, providing help in areas of Information Security, Project Management, and Process Excellence. For more information, Pl contact me through my website https://aniloberai.blogspot.in/

86 Views

How good is ITIL certification for freshers in IT industry?

ITIL certification is for practitioners , not only a subject in a course. So get some practical experience first, for at least 2–3 years, on IT enabled services support environment, get first hand exposure of incident management, change management , could be relocating of servers and Communication, Internet Infrastructure , put a measurement system in place of the incidents observed and time taken to repair, see and understand the token based fault alert system in place , or put one in place in your organization , then go in for ITIL certification . After the certification put the measurement system in place again, and I am sure you and your management will be very happy with the results , I can assure you !!

That will really help you and understand the terms in ITIL (there are plenty in this library of IT infrastructure .

That is my advise to all freshers.

Good luck,

I am an IT Consultant providing help in areas of Information Security, Project Management, and Process Excellence. For more information, Pl contact me through my website https://aniloberai.blogspot.in/