All university data must be classified into one of 4 categories described in this standard and protected using security measures consistent with the minimum standards for the classification level as described in related information/data security policies.