<![CDATA[Classification levels]]>The field/metadata "Importance" contains some classification values (Personal data, Confidential, ...) and importance values (Normal, High, ...) all mixed. The need of a new field "Classification" seems to be important to separate both meaning (Importance and Classification/Dissemination). Here are the proposed values :

Diffusion Value Rules
Civilian
Not Classified (default)
C1 - Internal Use B
C2 - Restricted Distribution
C3 – Secret / Confidential A
Military (FR)
Restricted Distribution
Secret-Defense A
Top Secret-Defense A

The NATO and TLP (CISA - Cybersecurity & Infrastructure Security Agency) classifications will be added to these lists if necessary.

]]>https://community.ceo-vision.com/topic/771/classification-levelsRSS for NodeFri, 04 Sep 2026 20:06:50 GMTThu, 11 May 2023 18:41:29 GMT60<![CDATA[Reply to Classification levels on Thu, 15 Jan 2026 11:43:50 GMT]]>As part of the follow-up for this post, we have created an equivalence table (for information purposes only) between various standards and recommendations regarding data classification:

Civilian Organization Military France EUCI (Europe) TLP (CISA)
NC – Unclassified / Public TLP:CLEAR
C1 – Internal Use TLP:AMBER+STRICT
C2 – Restricted / Sensitive / (Confidential*) Restricted EU Restricted TLP:GREEN
EU Confidential TLP:AMBER
C3 – Secret / Sovereign Sensitive Secret EU Secret TLP:RED
Very Secret EU Top Secret

* in GoFAST 4.5 and below, subject to future changes : Confidential will be moved to C3

]]>https://community.ceo-vision.com/post/3771https://community.ceo-vision.com/post/3771Thu, 15 Jan 2026 11:43:50 GMT<![CDATA[Reply to Classification levels on Tue, 23 Apr 2024 13:34:50 GMT]]>Hello,

Just to inform you that the European Union classification has been added in 4.2.0_HOTFIX_1.0 release:

image.png

Raphaël.

]]>https://community.ceo-vision.com/post/3211https://community.ceo-vision.com/post/3211Tue, 23 Apr 2024 13:34:50 GMT<![CDATA[Reply to Classification levels on Mon, 15 Apr 2024 15:18:50 GMT]]>I agree, there is now an overlap in "Criticity" and "Classification"

Classification Criticity
Civilian Confidential Data
NC - Not Classified / Public Internal Distribution
C1 - Internal Use Personal data
C2 - Restricted Distribution Critical
C3 – Secret / Confidential High
Normal
Low

In our current view, "Confidential data" and "Internal Distribution" should be deleted to avoid overlap with the new "Classification" metadata.

In your usecase you could use NC for your ¨Public" documents, C1 for your Instutitional use and C2 for Sensitive (we could perhaps rename "C2 - Restricted Distribution" by "C2 - Restricted / Sensitive".

Is this makes sense ?

]]>https://community.ceo-vision.com/post/3188https://community.ceo-vision.com/post/3188Mon, 15 Apr 2024 15:18:50 GMT<![CDATA[Reply to Classification levels on Thu, 11 Apr 2024 16:56:58 GMT]]>@cpotter
Indeed, we use the EUCI scheme, and for non-classified information we would apply
Public
Institutional USE (default) (well, for you that would be "CEO-Vision use")
SENSITIVE

But that would not be a classification but a Criticity in GoFAST metadata. In terms of classification it is just unclassified; or perhaps one would add a TLP as information about sharing with third parties

]]>https://community.ceo-vision.com/post/3186https://community.ceo-vision.com/post/3186Thu, 11 Apr 2024 16:56:58 GMT<![CDATA[Reply to Classification levels on Wed, 10 Apr 2024 15:08:15 GMT]]>NIST classification could also be considered :

  • Restricted
  • Confidential
  • Public

but this is more or less what we introduced in the "Civilian" section. NIST just don't have the C1 - Internal use

]]>https://community.ceo-vision.com/post/3183https://community.ceo-vision.com/post/3183Wed, 10 Apr 2024 15:08:15 GMT<![CDATA[Reply to Classification levels on Wed, 10 Apr 2024 15:03:19 GMT]]>Data classification will be introduced in GoFAST 4.2, we added U.S.CISA TLP standard and are considering to add the EU classified information (EUCI) scheme, which is :

  • TRÈS SECRET UE/EU TOP SECRET: the unauthorised disclosure of this information could cause exceptionally grave prejudice to the essential interests of the EU or one or more of the member states.
  • SECRET UE/EU SECRET: the unauthorised disclosure of this information could seriously harm the essential interests of the EU or one or more of the member states.
  • CONFIDENTIEL UE/EU CONFIDENTIAL: the unauthorised disclosure of this information could harm the essential interests of the EU or one or more of the member states.
  • RESTREINT UE/EU RESTRICTED: the unauthorised disclosure of this information could be disadvantageous to the interests of the EU or one or more of the member states.
]]>https://community.ceo-vision.com/post/3181https://community.ceo-vision.com/post/3181Wed, 10 Apr 2024 15:03:19 GMT