CGRC · Question #250
What are the FIPS Publication 199 defined 3 levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability
The correct answer is A. Low, Moderate, High. FIPS Publication 199 defines three distinct levels of potential impact (Low, Moderate, and High) on an organization or individuals resulting from a breach of confidentiality, integrity, or availability. These levels are used to categorize information systems and determine appropr
Question
What are the FIPS Publication 199 defined 3 levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability)? Response:
Options
- ALow, Moderate, High
- BUnlimited, Moderate, High
- CLow, Moderate, Very High
- DLow, Disqualify, High
How the community answered
(62 responses)- A87% (54)
- B8% (5)
- C2% (1)
- D3% (2)
Why each option
FIPS Publication 199 defines three distinct levels of potential impact (Low, Moderate, and High) on an organization or individuals resulting from a breach of confidentiality, integrity, or availability. These levels are used to categorize information systems and determine appropriate security controls.
FIPS Publication 199, 'Standards for Security Categorization of Federal Information and Information Systems,' explicitly defines three potential impact levels for information systems and the information they process, store, or transmit. These levels are Low, Moderate, and High, and they apply to potential adverse effects on confidentiality, integrity, or availability. These impact levels are fundamental for establishing the baseline security controls required for a system.
'Unlimited' is not one of the defined impact levels in FIPS 199.
'Very High' is not one of the defined impact levels in FIPS 199; it uses Low, Moderate, High.
'Disqualify' is not one of the defined impact levels in FIPS 199.
Concept tested: FIPS 199 impact levels
Source: https://csrc.nist.gov/publications/detail/fips/199/final
Topics
Community Discussion
No community discussion yet for this question.