Dubai Data Classification Framework
Source: neXgen analysis Confidential
1.DatasetIdentification
1.1Identifyprioritydatasetsforclassification
2.DatasetClassification
2.1Classifytheattributes2.2Splitdatasetbasedonattributeclassification2.3IdentifyattributescausingaSecret,Sensitive,orConfidentialscoringinordertoarriveatopenclassification
3.ClassificationReview&Approval
3.1ReviewclassificationbySmartDubaiOffice3.2ReviewandagreeonfinalclassificationbySmartDubaiandDepartment
3
Classify Datasets
Source: neXgen analysis Confidential
1 – Dataset Identification
IdentifiedDatasets
PriorityDataset
RegularDataset
• DoanyofthefollowingapplytotheDataset• PartofPrimaryRegistry• StrategicalignmentwithSmart
Dubaipriorities(inparticularSmartEconomyandSmartLiving)
• Userdemandforthedata• Governmentefficiencybenefits• Serviceimprovementbenefits• Economicgrowthbenefits• Transparency/accountability
benefits
Yes
No
1.1 Identify priority datasets for classification:
4
Source: neXgen analysis Confidential
OpenData
SharedData
Confidential
Sensitive
Secret
5
2 – Dataset ClassificationTypes of Classification
Shareableinalimitedwaybetweencertainindividualsunderstrictcontrols
Shareablewithincertaingroupssubjecttostrictcontrols
Shareableacrossentitiesaccordingtoprofessionalresponsibilities
Ownedbyentities ismadeavailableforsharingandre-usebyotherentities
OpenlyDisclosedtoeveryone
Source: neXgen analysis Confidential
2 Classification WorkflowUnderstanding the decision making process
InputDepartmentDataset
SharedDataProfileriskto
determinedamagelevelinorderto
classify
ConfidentialData
SecretData
SensitiveData
DisclosureaffectsNationalSecurity
Significant
Yes
NoDisclosureviolatesexistinglaw
Yes
No
OpenData
Doesdatadisclosurenegatively
impacton..
Theabilityoftheagencytoconductitstasks
Individuals’privacies
Competitivenessandcontinuityof
companies/institutionsThecourseofjusticeand
securityprocesses
Publichealthandsafety
NoimpactImpactfound2.2
Classifytheattributes
2.1
Splitdatasetbasedonattributeclassification
ReviewDatasetTodetermineattributestobe
removedtoarriveatopenclassification
2.3
6
Source: neXgen analysis Confidential
Use the classification assistant to help determine the dataset classification through a series of questions
7
2 Classification AssistantSmart Dubai provided tool to aid data classification
Source: neXgen analysis Confidential 8
2.3 – Process for Disagreement with Classification from the Assistant Tool
IfclassificationisdifferentfromtheClassificationAssistantsuggestion
DeterminetheclassificationbasedontheDepartment’sunderstanding
Thenprovideexplanationtosupporttherevised
classification
Source: neXgen analysis Confidential 9
3 Classification Review & Approval Process
SmartDubaiOfficeReview
Agreewiththe
Classificationfromthe
department
JointReviewbetweenSmartDubaiandDepartment
DatasetClassificationApproved
Yes
No
SmartDubaiOfficereviewsclassification
3.1
SmartDubaiandDepartmentreviewandagreeonfinalclassification
3.2