Abstract
This standard provides requirements for handling sensitive information that create a balance between accessibility and protection and ensure that information is not improperly changed, inadvertently or by design. The standard requires RIT departments to adopt a plan to ensure information access and protection. The standard addresses both the confidentiality of information to protect against unauthorized or unplanned exposure, and the integrity/reliability of the information to protect against unplanned changes or deletion.