Professional Exam.
What document establishes security categories for both information and
information systems?
FIPS 199
What are the three security objectives for information and information systems?
Confidentiality, Integrity, Availability
What document establishes three potential levels of impact (low, moderate, and
high)?
FIPS 199
What is low impact?
limited adverse effect on organizational operations, organizational assets, or
individuals.
, What is moderate impact?
severe or catastrophic adverse effect on organizational operations, organizational
assets, or individuals
What are the steps to assign a impact level/security categorization?
1) Identify Info types
2) Select Provisional Impact Levels
3)Adjust/Finalize Information Impact Levels
4)Assign System Security Category
What defines the select and categorize steps of RMF for National Security
Systems?
CNSS Instruction 1253
What document defines standards for categorizing information and information
systems?
FIPS 199