SLIDE 4 4
Security – Risk Management
PG&E utilizes the following five information classifications:
Anything produced for public review and available to anyone inside or outside the
- company. This includes materials such as press releases, advertisements, or bill inserts.
- PG&E Internal
Information intended primarily for use within PG&E, such as organization charts,
personnel numbers, and company email messages. Distribution should be limited based
- n business need to know, and access controls are required.
- PG&E Confidential
Information such as trade secrets, customer or employee information, and passwords that should be shared solely on a business need to know basis. PG&E Confidential data must be encrypted for storage and transmission if electronic and, if printed, protected through controlled physical access, such as a locked filing cabinet.
- PG&E Restricted or PG&E Privileged (Law only)
Information such as Social Security Numbers, undisclosed financial information, and protected health information should be shared solely on a business need to know basis. Data must be for storage and transmission encrypted if electronic and, if printed, protected through controlled physical access. Note that PG&E Privileged is only used by Law.
