Authorization

Three categories of employee responsibilities:

• Owners: responsible for judging the value of the information resource and assigning the proper classification level.
• Custodians: administering access requests to information authorized by the owner.
• User: use the information for the purpose intended (follow the rules).