The loss of confidentiality, integrity, or availability that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other organizations, or the national security interests of the United States; (i.e., 1) causes a severe degradation in mission capability to an extent and duration that the organization is able to perform its primary functions, but the effectiveness of the functions is significantly reduced; 2) results in major damage to organizational assets; 3) results in major financial loss; or 4) results in severe or catastrophic harm to individuals involving loss of life or serious life threatening injuries). Response:

Question

Accepted Answer

A. High Impact The provided definition directly corresponds to a 'High Impact' level classification, indicating that the potential loss of confidentiality, integrity, or availability would result in severe or catastrophic consequences. These consequences include critical mission degradation, significant financial losses, major damage to assets, or life-threatening harm to individuals.

Answer

B. Low Impact Low Impact refers to a limited adverse effect, not the severe or catastrophic effects described.

Answer

C. Medium Impact Medium Impact is not a standard impact level classification in frameworks like NIST, which typically use Low, Moderate, and High.

Answer

D. Moderate Impact Moderate Impact refers to a serious adverse effect that is less severe than 'High Impact' and does not involve catastrophic outcomes or loss of life.

The loss of confidentiality, integrity, or availability that could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, individuals, other…

Question

Options

How the community answered

Why each option

Topics

Community Discussion