Data Classification

Data shall be classified as “Top Secret”, if unauthorized access to or disclosure of such data or its content adversely and exceptionally affects in a way that is difficult to resolve:

• - National interest including violations of conventions and treaties, adverse damage to the reputation of the country, diplomatic relations and political affiliations, operational efficiency of the security or intelligence operations of military forces, national economy, national infrastructure and Government functions, and/or
• - KSA organizations functionality causing damage to the national interest, and/or
• - Individuals„ health and safety at massive scale and privacy of Protected Individual personnel, and/or
• - Catastrophic damage to the environment or natural resources

• - Military operations details and plans and any information related thereto
• - Official political information on the international relationships and conventions or treaties and all related discussions, studies and preparations
• - Information related to the activities, measures and structure of security and intelligence bodies.
• - Information on the encryption keys and mechanisms used for national infrastructure
• - Information on terrorism crimes and aggressive plans
• - Information on weapons and ammunitions or strategic military locations or any source of deterrent force
• - Information on movements of armed forces or internal security forces or VIPs movements
• - Information that affects the Kingdom„s sovereignty

Data shall be classified as “Secret”, if unauthorized access to or disclosure of such data or its content adversely affects:

• - Affects national interest such as damage to the reputation of the country, diplomatic relations, operational efficiency of the security or intelligence operations of military forces, national economy, national infrastructure, Government functions, or the investigation of major cases such as terrorism funding and/or
• - Financial loss of KSA organizations that leads to bankruptcy or inability of the organizations to perform their duties or major loss of competitive abilities or combination thereof, and/or
• - Causes significant harm or injury impacting life of individuals
• - Causes long-term damage to the environment or natural resources

• - Information on logistics storage or economic storages
• - Vital installations„ information
• - Information on Memorandums of Understanding with the international companies to establish commercial or strategic economic interests in the Kingdom
• - Information related to bilateral agreements and diplomatic Memorandums of Understanding between the Kingdom and other countries

Data shall be classified as “Confidential” data, if unauthorized access to or disclosure of such data or its content causes:

• - Contained negative affect on government entities„ operations, KSA economy, and/or
• - Damage to any entity„s assets and limited loss to its financial and competitive status, and/or
• - Negative effect on individuals„ interests
• - Contained damage in the short-term to the environment or natural resources.

• - Information that damages the reputation of a public figure
• - Detailed statements of individual transactions
• - Results of practical research and studies before publication thereof
• - Information related to products under manufacturing, which may damage fair competition
• - Sensitive administrative decisions and appointments information
• - Information on an individual's medical file
• - Personally Identifiable Information (PII) such as name, address, social security numbers, phone numbers, and account numbers, license numbers, biometric identifiers
• - Employees„ salary information
• - Documents such as tactical level plans, marketing programs prior to public release, technology innovation plans
• - Vendor contracts and quotations
• - Requests for proposals
• - New product specification prior to public release
• - Design & implementation details of security systems (firewalls, access control, network diagrams, etc.) - Internal Entities Policies and Procedures
• - Internal Communications/Memos
• - Entities internal phone lists and email lists

Data shall be classified as “Public”, if unauthorized access to or disclosure of such data or its content has no impact on: 

• - National Interest, or
• - Organizations, or
• - Individuals, or
• - Environment

• - National strategic trends.
• - National statistics on population, environment, businesses by industry, and others
• - Public development and economic studies.
• - Government acts and policies
• - Information on public services provided to citizens by Government
• - Organization contact persons
• - Advertisement for job postings
• - Public Announcements
• - Press releases
• - Publicly released financial results
• - Product presentations (Public)
• - Public relations information
• - Any information that is publicly available on organization websites
• - Advertisement