Why are we doing this?
As a university, we have a duty to handle information correctly and securely. The sensitivity labels are designed to support you as an employee, and their purpose is to make it easier to do the right thing. They help you assess information as you create or handle it, rather than having to go through large amounts of information all at once later on to comply with SLU’s rules. This strengthens information security across the entire organization and reduces the risk of sensitive information being inadvertently disclosed. A more consistent and structured approach to information management also creates better conditions for using new digital tools, such as AI, in a secure and responsible manner.
To begin with, the implementation is primarily about getting used to the labeling and starting to use the support. In the long term, different classifications will also be linked to more technical safeguards - more information on this will be provided at a later stage.
What does this mean i practice?
When you create an email or document, you can choose from different sensitivity levels based on the university’s rules for information classification (SLU.ua.2024.1.1.1-1752 in Swedish only).
You select the classification directly in the application using the button with a shield symbol. This means you do not need to use a separate system.
Sample image: View as the email sender.
There are help texts in the system to help you choose the correct level;
- K0 - Public information: information that can be widely shared.
- K1 - Internal information: information for use within SLU.
- K2 - Confidential information: information that should only be shared with a limited group.
- K3 - Highly confidential information: highly sensitive information that may only be shared with a very limited group.
Important! Information classified as K3 - Highly confidential information must not be stored or handled in Microsoft 365 or Outlook. Use SLU’s secure storage and communication solutions to share K3 information.
The classification is included with the email or document and helps both you and the recipient understand how the information should be handled.
Example: View as the recipient of an email/who opened a classified document.
What do you need to do?
It is not mandatory to classify all information, but starting September 14, the classification feature will be available in Outlook and Office applications, and we encourage all employees to start using it once it becomes available. A good first step is to:
- read the support articles on the Sharepoint page
- try out the feature in Outlook or Office applications
- read the help texts displayed in the system (Outlook/Office)
Do you need help?
If you have questions or would like to learn more, you can find support on our Sharepoint site Information Security for SLU in M365, where we’ve compiled quick reference guides, FAQs, how-to guides, and other information. You can also contact your manager, IT coordinator, or the Security Department through support.