The University has established "Information Classification and Handling Standard" to classify, label and handle information resources based on their sensitivity, criticality, value, nature and the possible impact that could result from the unauthorised access, use or disclosure in accordance with legal, regulatory and contractual requirements.
The Microsoft Information Protection (MIP) framework is adopted to address the classification needs for email and electronic documents outlined in the standard. Sensitivity labels from the MIP let you classify email messages and documents in Microsoft 365. After a sensitivity label is applied to an email or document, any configured protection settings for that label are enforced on the content. For example, the "CityU Only" label may be applied to a document or email such that only people who have CityU credentials (EID) can access it. If the content is restricted for use by specific users, the "Restricted" label may be applied instead.
In CityU, the following label classification is used to facilitate the protection process: