Other – apply the marking • lead to additional expenditure for or financial loss to the SPCB and descriptor clearly, for • work substantially against the SPCB’s operational, contractual or commercial interests example in bold • breach a commitment to keep third party information confidential prominently on top of the page/file • breach statutory restrictions on the disclosure of information • compromise the confidentiality, integrity, or availability of SPCB data • undermine the privilege associated with legal advice • compromise the rights and freedoms of a living individual 9 Protective marking system 2021 Step 1 Step 2 Step 3 Harm test Select marking and Apply marking and The compromise of information would likely: descriptor descriptor Confidential Will cause serious harm – SP Online – apply the • place lives at risk should be marked equivalent sensitivity label • significantly undermine the safe and effective conduct of the Scottish Parliament Confidential. • significantly undermine the decision-making process of senior staff Outgoing emails: apply the • breach the commitment of the SPCB to secure employee personal information An appropriate descriptor equivalent sensitivity label and group (where • significantly undermine the privilege associated with legal advice available) should also be Other – apply the marking • divulge information which could be used to compromise the cyber-security of SPCB ICT chosen to inform staff of the and descriptor clearly, for systems type of information being example in bold restricted and which group prominently on top of the it is restricted to. page/file.