Thread: NZ Information Security Manual

It should be "SENSITIVE".

Definition:
Compromise would likely cause harm to organisations, damage the interests of New Zealand, or endanger the safety or wellbeing of its citizens.

This is from the classification guidance at https://www.protectivesecurity.govt....w-to-classify/

An outline of the required handling of such information is:
SENSITIVE information should not generally be stored on systems accessible from the public Internet and must:

not be transmitted via email
use GCSB-encrypted access
when working off-site, use encryption on mobile devices communicating over public infrastructure, the Internet or non-agency-controlled networks
use RealMe login authentication.

source: https://www.digital.govt.nz/standard...y-information/