{ "document_id": 14040, "filename": "Data_Classification_Policy.pdf", "engine": "paddleocr_vl", "source_run_id": 14151, "generated_at": "2026-11-03T22:45:41+00:00", "page_count": 3, "counts_by_type": { "figure": 2, "header": 2, "heading": 19, "link": 1, "list": 5, "list_item": 14, "table": 2, "table_cell": 7, "text": 13, "title": 1 }, "timings": { "total_ms": 1381, "structure_ms": 1158, "text_layer_ms": 21, "build_ms": 6 }, "pages": [ { "document_id": 14040, "page": 1, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14151, "item_count": 16, "counts_by_type": { "figure": 2, "header": 2, "heading": 4, "list_item": 1, "text": 6, "title": 1 }, "build_ms": 1, "items": [ { "id": "p1.1", "order": 1, "type": "figure", "bbox": { "l": 256.56, "t": 758.16, "r": 354.24, "b": 687.12 }, "text": "", "attrs": { "role": "page_header", "block_label": "header_image" }, "reading_order": 0 }, { "id": "p1.2", "order": 2, "type": "header", "bbox": { "l": 229.68, "t": 680.16, "r": 381.36, "b": 650.64 }, "text": "KENTUCKY STATE UNIVERSITY", "attrs": { "block_label": "header" }, "level": 2, "reading_order": 1 }, { "id": "p1.3", "order": 3, "type": "header", "bbox": { "l": 241.92, "t": 644.64, "r": 369.6, "b": 631.44 }, "text": "Policies and Regulations", "attrs": { "block_label": "header" }, "level": 2, "reading_order": 2 }, { "id": "p1.4", "order": 4, "type": "figure", "bbox": { "l": 232, "t": 756, "r": 379.56, "b": 621.4 }, "text": "", "attrs": { "source": "pdf_image" }, "reading_order": 3 }, { "id": "p1.5", "order": 5, "type": "text", "bbox": { "l": 34.08, "t": 606, "r": 144, "b": 573.12 }, "text": "POLICY TITLE:\nData Classification", "reading_order": 4 }, { "id": "p1.6", "order": 6, "type": "heading", "bbox": { "l": 33.84, "t": 554.88, "r": 106.8, "b": 540.72 }, "text": "APPLIES TO:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 5 }, { "id": "p1.7", "order": 7, "type": "text", "bbox": { "l": 34.08, "t": 537.6, "r": 569.52, "b": 504.96 }, "text": "All representatives, affiliates, vendors, and contractors who use, generate, or have access to Kentucky State University data", "reading_order": 6 }, { "id": "p1.8", "order": 8, "type": "text", "bbox": { "l": 33.84, "t": 486.24, "r": 287.28, "b": 435.36 }, "text": "ADMINISTRATIVE AUTHORITY:\nChief Information Officer (CIO)\nDepartment of Information Technology (IT)", "reading_order": 7 }, { "id": "p1.9", "order": 9, "type": "text", "bbox": { "l": 33.36, "t": 417.6, "r": 288.96, "b": 384.96 }, "text": "APPROVED BY:\nKentucky State University Board of Regents", "reading_order": 8 }, { "id": "p1.10", "order": 10, "type": "title", "bbox": { "l": 33.84, "t": 366.96, "r": 132.96, "b": 333.84 }, "text": "EFFECTIVE DATE: August 8, 2025", "level": 2, "reading_order": 9 }, { "id": "p1.11", "order": 11, "type": "text", "bbox": { "l": 33.84, "t": 315.84, "r": 155.28, "b": 282.96 }, "text": "NEXT REVIEW DATE:\nAugust 8, 2028", "reading_order": 10 }, { "id": "p1.12", "order": 12, "type": "heading", "bbox": { "l": 33.84, "t": 266.4, "r": 153.6, "b": 252 }, "text": "POLICY STATEMENT:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 11 }, { "id": "p1.13", "order": 13, "type": "text", "bbox": { "l": 33.12, "t": 233.52, "r": 578.16, "b": 154.08 }, "text": "All Kentucky State University (KSU) data must be classified according to its level of sensitivity to ensure that appropriate security controls are applied. This policy provides the framework for classifying data and outlines the baseline requirements for its protection. All users are required to familiarize themselves with and adhere to this policy to protect the university's information from unauthorized disclosure, use, modification, or deletion, and to ensure compliance with applicable laws and regulations.", "reading_order": 12 }, { "id": "p1.14", "order": 14, "type": "heading", "bbox": { "l": 34.08, "t": 136.56, "r": 115.68, "b": 121.92 }, "text": "DEFINITIONS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 13 }, { "id": "p1.15", "order": 15, "type": "heading", "bbox": { "l": 34.32, "t": 103.44, "r": 157.92, "b": 90 }, "text": "Data Classification Level", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 14 }, { "id": "p1.16", "order": 16, "type": "list_item", "bbox": { "l": 34.08, "t": 72.58500000000004, "r": 577.92, "b": 40.32 }, "text": "Confidential: The most sensitive data, intended for use strictly within KSU and protected by law or confidentiality agreements (e.g., data covered by FERPA, HIPAA, GLBA, PCI-DSS). Its unauthorized disclosure", "reading_order": 15 } ] }, { "document_id": 14040, "page": 2, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14151, "item_count": 23, "counts_by_type": { "heading": 9, "list": 2, "list_item": 5, "text": 7 }, "build_ms": 2, "items": [ { "id": "p2.1", "order": 1, "type": "text", "bbox": { "l": 51.36, "t": 754.56, "r": 258, "b": 740.4 }, "text": "could seriously and adversely impact KSU.", "reading_order": 0 }, { "id": "p2.2", "order": 2, "type": "list", "bbox": { "l": 33.84, "t": 723.78, "r": 577.92, "b": 626.88 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p2.2.1", "order": 3, "type": "list_item", "bbox": { "l": 33.84, "t": 723.78, "r": 577.68, "b": 675.12 }, "text": "Restricted: Less-sensitive business data intended for internal KSU use. Its unauthorized disclosure could adversely impact KSU or its partners but would not violate the law. By default, all information not defined as Confidential or Public is considered Restricted.", "reading_order": 0 }, { "id": "p2.2.2", "order": 4, "type": "list_item", "bbox": { "l": 34.08, "t": 658.76, "r": 577.92, "b": 626.88 }, "text": "Public: Information approved by KSU administration for release to the general public, which may be disclosed to anyone.", "reading_order": 1 } ], "reading_order": 1 }, { "id": "p2.3", "order": 5, "type": "heading", "bbox": { "l": 33.84, "t": 607.92, "r": 98.16, "b": 594.96 }, "text": "Data Owner", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 2 }, { "id": "p2.4", "order": 6, "type": "text", "bbox": { "l": 33.6, "t": 592.08, "r": 577.44, "b": 561.36 }, "text": "The KSU manager or official responsible for the business function supported by an information resource. Data owners are responsible for authorizing user access and ensuring users are trained on proper data handling.", "reading_order": 3 }, { "id": "p2.5", "order": 7, "type": "heading", "bbox": { "l": 33.84, "t": 543.6, "r": 113.76, "b": 530.4 }, "text": "Data Custodian", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 4 }, { "id": "p2.6", "order": 8, "type": "text", "bbox": { "l": 33.36, "t": 527.52, "r": 577.92, "b": 497.28 }, "text": "An employee responsible for the day-to-day maintenance of information resources, such as backups and physical security. This is a shared responsibility between Information Technology and data owners.", "reading_order": 5 }, { "id": "p2.7", "order": 9, "type": "heading", "bbox": { "l": 34.08, "t": 479.04, "r": 87.36, "b": 466.32 }, "text": "Data User", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 6 }, { "id": "p2.8", "order": 10, "type": "text", "bbox": { "l": 33.36, "t": 463.44, "r": 536.88, "b": 449.52 }, "text": "An individual authorized by a data owner to access university data to perform their job responsibilities.", "reading_order": 7 }, { "id": "p2.9", "order": 11, "type": "heading", "bbox": { "l": 33.6, "t": 430.8, "r": 150.96, "b": 417.6 }, "text": "Information Resources", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 8 }, { "id": "p2.10", "order": 12, "type": "text", "bbox": { "l": 33.6, "t": 414.48, "r": 578.16, "b": 385.68 }, "text": "All data, equipment, facilities, and software used by KSU to create, collect, process, store, and transmit information.", "reading_order": 9 }, { "id": "p2.11", "order": 13, "type": "heading", "bbox": { "l": 33.84, "t": 366, "r": 93.36, "b": 351.84 }, "text": "PROCESS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 10 }, { "id": "p2.12", "order": 14, "type": "heading", "bbox": { "l": 33.84, "t": 334.8, "r": 127.92, "b": 321.6 }, "text": "Guiding Principles", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 11 }, { "id": "p2.13", "order": 15, "type": "text", "bbox": { "l": 33.12, "t": 320.4, "r": 577.92, "b": 276.96 }, "text": "The requirements set forth in this policy are based on the principles of \"need to know\" and \"least privilege.\" This means information should not be disclosed to any person who does not have a legitimate and demonstrable business need for it.", "reading_order": 12 }, { "id": "p2.14", "order": 16, "type": "heading", "bbox": { "l": 33.84, "t": 261.36, "r": 180.72, "b": 248.64 }, "text": "Data Handling Requirements", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 13 }, { "id": "p2.15", "order": 17, "type": "text", "bbox": { "l": 33.36, "t": 246.96, "r": 544.8, "b": 232.56 }, "text": "All data users must utilize appropriate controls when storing, handling, and distributing KSU information.", "reading_order": 14 }, { "id": "p2.16", "order": 18, "type": "heading", "bbox": { "l": 33.84, "t": 217.44, "r": 110.4, "b": 204.96 }, "text": "Access Control", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 15 }, { "id": "p2.17", "order": 19, "type": "list", "bbox": { "l": 33.84, "t": 189.61, "r": 577.44, "b": 84.48 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p2.17.1", "order": 20, "type": "list_item", "bbox": { "l": 34.08, "t": 189.61, "r": 577.2, "b": 159.36 }, "text": "Access to information must be granted only to individuals with a legitimate business need and specific authorization from the Data Owner.", "marker": "-", "reading_order": 0 }, { "id": "p2.17.2", "order": 21, "type": "list_item", "bbox": { "l": 33.84, "t": 145.11, "r": 481.92, "b": 129.12 }, "text": "Systems must have controls to authenticate the identity of users before granting access.", "marker": "•", "reading_order": 1 }, { "id": "p2.17.3", "order": 22, "type": "list_item", "bbox": { "l": 34.08, "t": 115.08000000000004, "r": 577.44, "b": 84.48 }, "text": "When an employee changes departments or leaves the University, the IT Help Desk must be notified immediately so access can be modified or removed.", "reading_order": 2 } ], "reading_order": 16 }, { "id": "p2.18", "order": 23, "type": "heading", "bbox": { "l": 34.32, "t": 68.64, "r": 129.36, "b": 56.16 }, "text": "Data Transmission", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 17 } ] }, { "document_id": 14040, "page": 3, "width": 612, "height": 792, "rotation": 0, "pipeline_version": "paddleocr-vl-1.6+paul-48", "width_pt": 612, "height_pt": 792, "engine": "paddleocr_vl", "source_run_id": 14151, "item_count": 27, "counts_by_type": { "heading": 6, "link": 1, "list": 3, "list_item": 8, "table": 2, "table_cell": 7 }, "build_ms": 3, "items": [ { "id": "p3.1", "order": 1, "type": "list", "bbox": { "l": 33.36, "t": 756.03, "r": 578.16, "b": 680.88 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p3.1.1", "order": 2, "type": "list_item", "bbox": { "l": 34.32, "t": 756.03, "r": 578.16, "b": 710.64 }, "text": "Confidential Data: Must be encrypted when transmitted over any external or wireless network. All such transmissions must use a virtual private network (VPN) or similar IT-approved software. Transmission over personal or non-KSU networks is prohibited.", "reading_order": 0 }, { "id": "p3.1.2", "order": 3, "type": "list_item", "bbox": { "l": 33.36, "t": 696.78, "r": 576.72, "b": 680.88 }, "text": "Restricted Data: Encryption is strongly recommended when transmitting over external or wireless networks.", "reading_order": 1 } ], "reading_order": 0 }, { "id": "p3.2", "order": 4, "type": "heading", "bbox": { "l": 34.08, "t": 665.52, "r": 102.96, "b": 651.84 }, "text": "Data Storage", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 1 }, { "id": "p3.3", "order": 5, "type": "list", "bbox": { "l": 33.36, "t": 637.51, "r": 578.16, "b": 532.8 }, "text": "", "attrs": { "item_count": 3 }, "children": [ { "id": "p3.3.1", "order": 6, "type": "list_item", "bbox": { "l": 33.84, "t": 637.51, "r": 578.16, "b": 606.96 }, "text": "All KSU information should be stored on KSU servers, network storage devices, or KSU-approved cloud storage. Storing data on local PC drives is not recommended as it is not backed up.", "marker": "-", "reading_order": 0 }, { "id": "p3.3.2", "order": 7, "type": "list_item", "bbox": { "l": 34.32, "t": 592.98, "r": 577.68, "b": 562.8 }, "text": "Storage of Confidential data on personal or unauthorized equipment is prohibited unless approved by IT, in which case encryption is required.", "marker": "-", "reading_order": 1 }, { "id": "p3.3.3", "order": 8, "type": "list_item", "bbox": { "l": 33.36, "t": 548.23, "r": 434.64, "b": 532.8 }, "text": "Storage of credit card information on KSU computing equipment is prohibited.", "marker": "•", "reading_order": 2 } ], "reading_order": 2 }, { "id": "p3.4", "order": 9, "type": "heading", "bbox": { "l": 34.32, "t": 516.96, "r": 107.28, "b": 503.76 }, "text": "Data Disposal", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 3 }, { "id": "p3.5", "order": 10, "type": "list_item", "bbox": { "l": 34.08, "t": 489.21, "r": 578.88, "b": 443.52 }, "text": "Storage media containing sensitive (confidential or restricted) information must be completely sanitized or physically destroyed before being reused or disposed of. Deleting files is not sufficient. Users must contact IT for assistance with proper data disposal.", "marker": "-", "reading_order": 4 }, { "id": "p3.6", "order": 11, "type": "heading", "bbox": { "l": 33.36, "t": 428.64, "r": 261.84, "b": 414.72 }, "text": "Incident Reporting and Information Requests", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 5 }, { "id": "p3.7", "order": 12, "type": "list", "bbox": { "l": 34.08, "t": 400.44, "r": 577.92, "b": 311.04 }, "text": "", "attrs": { "item_count": 2 }, "children": [ { "id": "p3.7.1", "order": 13, "type": "list_item", "bbox": { "l": 34.08, "t": 400.44, "r": 577.92, "b": 355.68 }, "text": "Loss or Breach: The loss, breach, or unauthorized access of any Restricted or Confidential data must be reported immediately to Information Technology, the Office of the General Counsel, Risk Management, and the KSU Police Department.", "reading_order": 0 }, { "id": "p3.7.2", "order": 14, "type": "list_item", "bbox": { "l": 34.32, "t": 341.16, "r": 577.68, "b": 311.04 }, "text": "Open Records Requests: All requests for data or information made under the Kentucky Open Records Act must be referred to the Office of the General Counsel.", "reading_order": 1 } ], "reading_order": 6 }, { "id": "p3.8", "order": 15, "type": "heading", "bbox": { "l": 33.6, "t": 294.72, "r": 267.12, "b": 280.08 }, "text": "REFERENCES AND RELATED MATERIALS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 7 }, { "id": "p3.9", "order": 16, "type": "heading", "bbox": { "l": 34.56, "t": 263.28, "r": 102.48, "b": 249.12 }, "text": "CONTACTS:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 8 }, { "id": "p3.10", "order": 17, "type": "table", "bbox": { "l": 34.8, "t": 233.28, "r": 576, "b": 202.08 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 4, "integrity": { "cells_checked": 4, "cells_flagged": 0 } }, "children": [ { "id": "p3.10.1", "order": 18, "type": "table_cell", "bbox": { "l": 41.775, "t": 230.33000000000004, "r": 131.471, "b": 203.08000000000004 }, "text": "Subject\nGeneral Questions", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p3.10.2", "order": 19, "type": "table_cell", "bbox": { "l": 190.08, "t": 230.33000000000004, "r": 270.708, "b": 203.08000000000004 }, "text": "Office\nOffice of the CIO", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p3.10.3", "order": 20, "type": "table_cell", "bbox": { "l": 328.38, "t": 230.33000000000004, "r": 402.724, "b": 203.08000000000004 }, "text": "Telephone\n(502) 597-7000", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 }, { "id": "p3.10.4", "order": 21, "type": "table_cell", "bbox": { "l": 439.17, "t": 230.33000000000004, "r": 553.914, "b": 203.08000000000004 }, "text": "E-mail\nWendy.Dixie@kysu.edu", "attrs": { "row": 0, "col": 3, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "children": [ { "id": "p3.10.4.1", "order": 22, "type": "link", "bbox": { "l": 436.65, "t": 217.66, "r": 555.81, "b": 203.02 }, "text": "Wendy.Dixie@kysu.edu", "attrs": { "uri": "mailto:Wendy.Dixie@kysu.edu", "action_type": "/URI", "row": 0, "col": 3, "rowspan": 1, "colspan": 1 }, "reading_order": 0 } ], "reading_order": 3 } ], "reading_order": 9 }, { "id": "p3.11", "order": 23, "type": "heading", "bbox": { "l": 34.8, "t": 185.52, "r": 90.24, "b": 171.84 }, "text": "HISTORY:", "attrs": { "block_label": "paragraph_title" }, "level": 3, "reading_order": 10 }, { "id": "p3.12", "order": 24, "type": "table", "bbox": { "l": 35.76, "t": 155.76, "r": 576.24, "b": 109.2 }, "text": "", "attrs": { "block_label": "table", "n_rows": 1, "n_cols": 3, "integrity": { "cells_checked": 3, "cells_flagged": 0 } }, "children": [ { "id": "p3.12.1", "order": 25, "type": "table_cell", "bbox": { "l": 41.775, "t": 153.04999999999995, "r": 260.523, "b": 110.77999999999997 }, "text": "Revision Type\nIssued (New Policy)\nRevised (New Template and Minor Revisions)", "attrs": { "row": 0, "col": 0, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 0 }, { "id": "p3.12.2", "order": 26, "type": "table_cell", "bbox": { "l": 284.63, "t": 153.04999999999995, "r": 409.838, "b": 110.77999999999997 }, "text": "Date of Issuance/Revision\nMay 2014\nJune 2025", "attrs": { "row": 0, "col": 1, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 1 }, { "id": "p3.12.3", "order": 27, "type": "table_cell", "bbox": { "l": 424.17, "t": 153.04999999999995, "r": 565.086, "b": 110.77999999999997 }, "text": "Drafter(s)/Editor(s)\nUnknown\nWendy Dixie and Zach Atwell", "attrs": { "row": 0, "col": 2, "rowspan": 1, "colspan": 1, "bbox_refit": true, "merged_continuation": true, "column_header": true, "header_source": "pdf" }, "reading_order": 2 } ], "reading_order": 11 } ] } ] }