CGRC · Question #215
The publication that has the Standards for Security Categorization of Federal Information and Information Systems. Response:
The correct answer is A. FIPS 199. FIPS 199, titled "Standards for Security Categorization of Federal Information and Information Systems," provides the official guidelines for federal agencies to categorize their information and systems based on potential impact levels. This categorization is crucial for…
Question
The publication that has the Standards for Security Categorization of Federal Information and Information Systems. Response:
Options
- AFIPS 199
- BFIPS 200
- CFIPS 300
- DFIPS 299
How the community answered
(25 responses)- A88% (22)
- B4% (1)
- D8% (2)
Why each option
FIPS 199, titled "Standards for Security Categorization of Federal Information and Information Systems," provides the official guidelines for federal agencies to categorize their information and systems based on potential impact levels. This categorization is crucial for determining appropriate security controls.
FIPS Publication 199 (FIPS 199) is the specific standard that establishes the guidelines for categorizing federal information and information systems based on the potential impact (low, moderate, high) on an organization if there is a breach of confidentiality, integrity, or availability.
FIPS 200, 'Minimum Security Requirements for Federal Information and Information Systems,' specifies the minimum security requirements, but it relies on FIPS 199 for the categorization itself.
FIPS 300 is not a recognized NIST publication for security categorization.
FIPS 299 is not a recognized NIST publication for security categorization.
Concept tested: FIPS 199 - Security Categorization
Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf
Topics
Community Discussion
No community discussion yet for this question.