Nevada Implements New Data Classification Policy Following Cyberattack
Nevada has introduced a new statewide data classification policy aimed at enhancing data protection and cybersecurity measures. This policy categorizes data into four distinct levels: 'public,' 'sensitive,' 'confidential,' and 'restricted.' The initiative comes in the wake of a significant cyberattack that disrupted state systems in late August. The policy, developed by Nevada's IT agency, seeks to standardize privacy across state agencies and improve digital resilience. It mandates that if the classification of data is unclear, it should be placed in the more restrictive category. The policy also emphasizes the importance of multifactor authentication as part of future cybersecurity efforts.