CGRC · Question #330
What is FIPS 199? Response:
The correct answer is A. Standards for Security Categorization of Federal Information and Information Systems. FIPS 199 is the 'Standards for Security Categorization of Federal Information and Information Systems,' providing a standardized approach for federal agencies to assess the potential impact of security breaches.
Question
What is FIPS 199? Response:
Options
- AStandards for Security Categorization of Federal Information and Information Systems
- BLaw for Security Categorization of Federal Information and Information Systems
- CTerminology for Security Categorization for Federal Information and Information Systems
- DData for Security definition for Federal Information and Information Systems
How the community answered
(46 responses)- A87% (40)
- B2% (1)
- C2% (1)
- D9% (4)
Why each option
FIPS 199 is the 'Standards for Security Categorization of Federal Information and Information Systems,' providing a standardized approach for federal agencies to assess the potential impact of security breaches.
FIPS 199, officially titled 'Standards for Security Categorization of Federal Information and Information Systems,' mandates a standardized process for federal agencies to categorize their information and information systems based on the potential impact of a loss of confidentiality, integrity, or availability. This categorization forms the foundation for selecting appropriate security controls within the RMF.
FIPS publications are federal information processing standards, not laws, although they carry significant weight and are often mandated by law.
FIPS 199 sets standards for categorization, not merely terminology, although it does define relevant terms.
FIPS 199 is about categorization standards, not specifically 'data for security definition.'
Concept tested: FIPS 199 - Security Categorization Standard
Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf
Topics
Community Discussion
No community discussion yet for this question.