DataClassificationPolicy

Data Classification Levels Table 1 herebelow outlines the master data classification levels, as compatible with the relevant impact level, along with guiding examples for each level. Classification Level Impact Level Description Examples Top Secret High Data shall be classified as “Top Secret” if unauthorized access to or disclosure of such data or its content has an exceptionally serious and irreparable effect on the following: - National interests, including violations of conventions and treaties, adverse damage to the reputation of the Kingdom, diplomatic relations and political - Information on the encryption keys and mechanisms used for national infrastructure; - Information on terrorism crimes and plans threating national security; - Information on weapons and ammunitions or strategic military locations or any source of defensive or offensive force - Information on the movements of armed forces Public affiliations, or to the operational efficiency of the security or military operations, national economy, national infrastructure or government functions; - The functionality and performance of public entities, causing damage to the national interest; - The health and safety of individuals at a massive scale, especially senior officials; - The environmental or natural resources. or other military forces, or VIPs - Information that affects the State’s sovereignty Secret Medium Data shall be classified as “Secret” if unauthorized access to or disclosure of such data or its content has a serious effect on the following: - National interests such as partial damage to the reputation of the Kingdom, diplomatic - Information on logistics storage or economic storages; - Information on vital installations; - Memorandums of Understanding with international companies to establish commercial or strategic economic interests in the Kingdom; Public relations, operational efficiency of the security or military operations, national economy, national infrastructure or government functions; - Financial loss for organizations, leading to bankruptcy or to inability of the entities to perform their duties or major loss for competitive abilities or a combination thereof; - Significant harm or injury to the life of individuals; - Long-term damage to the environmental or natural resources; - Investigation of major cases, as defined by law, such as terrorism funding. - Information related to bilateral agreements and diplomatic Memorandums of Understanding between the Kingdom and other countries. Restricted Low Data shall be classified as “Restricted” if unauthorized access to or disclosure of such - Information that damages the reputation of a public figure; - Detailed statements of individual transactions; Public data or its content causes: - Limited negative effect on the functioning of public entities or economic activities in the Kingdom or on a particular individual’s business; - Limited damage to any entity’s assets and limited loss to its financial and competitive status; - Limited, short-term damage to environmental or natural resources. - Results of practical research and studies before publication thereof; - Information related to products under manufacturing, which may damage fair competition; - Information related to sensitive administrative appointments and decisions; - Information on an individual's medical file; - Personally Identifiable Information (PII) such as name, address, National Identification Number, phone numbers, bank account and license numbers, and biometric identifiers; - Information on employee salaries; - Documents such as tactical level plans, marketing programs prior to public release and technology innovation plans; - Supplier contracts and quotations; Public