Data storage and retention – together is best

Information is classified and stored according to its need for protection. A clearly structured data storage system facilitates the joint processing of information. Above all, it is important for everyone involved to genuinely adhere to the prescribed rules. If you are not quite sure how to implement the specifications, ask your superior or security officer.

  1. Classify and handle your information correctly.
  2. Save business information only in the specified locations.
  3. Do not store any business-related information on private data carriers.
  4. Assign the correct authorisations needed to access your data (e.g. in the case of prolonged absences).

Further Information

Which classification levels do we distinguish between?

In principle, the following classification levels apply: 

  • No classification
  • Classification «INTERNAL»
  • Classification «CONFIDENITAL»
  • Classification «SECRET»

 

 
 

Which classification levels do we distinguish between?

In principle, the following classification levels apply:

 

What are the specified storage locations?

A structured data storage system enables common processing of information. It is important that everyone involved keeps to the storage rules. You yourself are responsible for backing up data on local or external data media.

 
 

Is classified information allowed on smartphones?

No information classified as CONFIDENTIAL or SECRET may be processed or stored on smartphones (except for applications authorised for this purpose - e.g. applications for encrypted communication).

 
 
 

Private data on official devices?

Your employer assumes no liability for lost data on official devices. Back up private information on your private devices.

 
 

Assign authorisations

For longer absences, assign the necessary, correct authorisations for accessing your data (e.g. GEVER, Outlook, etc.).

 
 

Destroy classified information on paper in the paper shredder

 
 
Aktenvernichter

For the correct disposal of classified documents in paper form, document destruction equipment is available in the Federal Administration.

How is electronic data deleted for good?

Electronic data is still readable after deleting with the Delete key or the "Delete" function (only information on the storage location is removed). To delete data permanently, the storage location of the information must be repeatedly overwritten. Special programmes are available for this process, known as "wiping".

 
 
 

Dispose of external data media correctly

Included are smartdevices and mobile phones. Make sure that the information stored is permanently deleted. Wipe external data media before handing them over for destruction. To delete data on smartdevices and mobile phones, you should execute the Reset function and reformat the memory card. 

 
 
 

Specialist staff
Last modification 12.12.2020

Top of page

https://www.ncsc.admin.ch/content/ncsc/en/home/dokumentation/bundesinterne-kampagnen/datenspeicherung_datenablage.html