Dubai Data Classification Framework

Source: neXgen analysis Confidential 2

Source: neXgen analysis Confidential

1.DatasetIdentification

1.1Identifyprioritydatasetsforclassification

2.DatasetClassification

2.1Classifytheattributes2.2Splitdatasetbasedonattributeclassification2.3IdentifyattributescausingaSecret,Sensitive,orConfidentialscoringinordertoarriveatopenclassification

3.ClassificationReview&Approval

3.1ReviewclassificationbySmartDubaiOffice3.2ReviewandagreeonfinalclassificationbySmartDubaiandDepartment

3

Classify Datasets

Source: neXgen analysis Confidential

1 – Dataset Identification

IdentifiedDatasets

PriorityDataset

RegularDataset

• DoanyofthefollowingapplytotheDataset• PartofPrimaryRegistry• StrategicalignmentwithSmart

Dubaipriorities(inparticularSmartEconomyandSmartLiving)

• Userdemandforthedata• Governmentefficiencybenefits• Serviceimprovementbenefits• Economicgrowthbenefits• Transparency/accountability

benefits

Yes

No

1.1 Identify priority datasets for classification:

4

Source: neXgen analysis Confidential

OpenData

SharedData

Confidential

Sensitive

Secret

5

2 – Dataset ClassificationTypes of Classification

Shareableinalimitedwaybetweencertainindividualsunderstrictcontrols

Shareablewithincertaingroupssubjecttostrictcontrols

Shareableacrossentitiesaccordingtoprofessionalresponsibilities

Ownedbyentities ismadeavailableforsharingandre-usebyotherentities

OpenlyDisclosedtoeveryone

Source: neXgen analysis Confidential

2 Classification WorkflowUnderstanding the decision making process

InputDepartmentDataset

SharedDataProfileriskto

determinedamagelevelinorderto

classify

ConfidentialData

SecretData

SensitiveData

DisclosureaffectsNationalSecurity

Significant

Yes

NoDisclosureviolatesexistinglaw

Yes

No

OpenData

Doesdatadisclosurenegatively

impacton..

Theabilityoftheagencytoconductitstasks

Individuals’privacies

Competitivenessandcontinuityof

companies/institutionsThecourseofjusticeand

securityprocesses

Publichealthandsafety

NoimpactImpactfound2.2

Classifytheattributes

2.1

Splitdatasetbasedonattributeclassification

ReviewDatasetTodetermineattributestobe

removedtoarriveatopenclassification

2.3

6

Source: neXgen analysis Confidential

Use the classification assistant to help determine the dataset classification through a series of questions

7

2 Classification AssistantSmart Dubai provided tool to aid data classification

Source: neXgen analysis Confidential 8

2.3 – Process for Disagreement with Classification from the Assistant Tool

IfclassificationisdifferentfromtheClassificationAssistantsuggestion

DeterminetheclassificationbasedontheDepartment’sunderstanding

Thenprovideexplanationtosupporttherevised

classification

Source: neXgen analysis Confidential 9

3 Classification Review & Approval Process

SmartDubaiOfficeReview

Agreewiththe

Classificationfromthe

department

JointReviewbetweenSmartDubaiandDepartment

DatasetClassificationApproved

Yes

No

SmartDubaiOfficereviewsclassification

3.1

SmartDubaiandDepartmentreviewandagreeonfinalclassification

3.2