US EditionNevada unveils new statewide data classification policy months after cyberattack
The policy standardizes data into four sensitivity categories to reduce accidental exposure and will serve as a foundation for future cybersecurity enhancements, officials said.
- On Wednesday, the Governor's Technology Office released a statewide policy to standardize data classification and storage for Executive Branch agencies, state employees, contractors, vendors, and IT systems, sorting data into four sensitivity categories.
- About six months after a cyberattack in late‑August that left state networks down for 28 days, officials unveiled the policy, following last year's legislative actions.
- The policy defines four sensitivity tiers, with agency leaders ensuring compliance and lower-level data officials deciding classifications; unclear items must be placed in more restrictive categories.
- Officials say the policy will strengthen digital resilience and data sharing, and the state called it the `foundation` for future cybersecurity efforts like multifactor authentication; it does not change Nevada's public records law but warns unauthorized disclosure could `result in substantial harm`.
- The policy explicitly accounts for the `mosaic effect`, assigns enforcement to agency leaders, and warns that noncompliance could trigger remediation mandates or escalation.
11 Articles
11 Articles
Associated Press News
Nevada unveils new statewide data classification policy months after cyberattack
Nevada’s IT agency has rolled out a new policy aimed at standardizing the privacy of state data, months after a massive cyberattack crippled certain systems for weeks.
Nevada unveils new statewide data classification policy months after cyberattack - The Nevada Independent
The policy marks the first time the state will have clear-cut categories for the sensitivity of data. Officials said this will allow agencies to go beyond simply denoting something as “sensitive” or “personal."
The Nevada IT agency has implemented a new policy aimed at standardizing the privacy of state data, months after a massive cyberattack paralysed certain systems for weeks. The policy announced on Wednesday by the Governor's Office of Technology marks the first time that the state will have clear categories for data sensitivity. Officials stated that this will allow agencies to go beyond simply classifying something as "sensitive" or "personal" a…
Coverage Details
Bias Distribution
- 67% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
