SPED SFPC EXAM: RISK MANAGEMENT FRAMEWORK (RMF) 2024

DoD systems are subject to what types of threats? - correct answer Confidentiality, integrity, or availability of information processed, stored, or transmitted by DoD systems. Define system categorization - correct answer System Categorization is the process by which the Information Owner identifies the potential impact (low, moderate, or high) that would result from the loss of confidentiality, integrity, and availability should a security breach occur. What is non-repudiation and the negative impacts of not having non--repudiation? - correct answer Definition: Protection against an individual falsely denying having performed a particular action. Provides the capability to determine whether a given individual took a particular action such as creating information, sending a message, approving information, and receiving a message. Negative impacts : 1.) Sender could deny message was sent. 2.) Recipient of email could change message and contest that altered message was sent by sender. What is confidentiality and the negative impacts of not having confidentiality? - correct answer Definition: Preserving authorized restrictions on information access and disclosure, including means for pro