Statement of Best Practice
- Based on data classification, instant messaging application communication should follow the guidelines set below:
- Restricted data should not be shared through instant messaging applications
- Confidential and Internal Only data should only be shared through either a direct message or in a private channel
- Public data may be shared in public channels, private channels, or through direct messaging
Contact
- Information Security Office
Definitions
Instant Messaging Applications
Examples include but are not limited to:
- Slack
- Google Chat
- Webex Messenger
- Facebook Messenger
- Any other social media messaging tools
Data Classifications
For examples or more detail on data classifications, reference this article.
Private Channel
A persistent channel limited to a number of individuals and new members must be granted permission to join.
Public Channel
A persistent channel that is limited to a number of individuals and new members are able to join without permission.
Direct Message
Messages between two or more individuals outside of an established persistent channel.