nerdexam
(ISC)2

CGRC · Question #531

FIPS Publication 199 defines three levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability)…

The correct answer is A. Low (limited adverse effect). FIPS Publication 199 defines three levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability), with 'Low' correlating to a limited adverse effect.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

FIPS Publication 199 defines three levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability). Response:

Options

  • ALow (limited adverse effect)
  • BHigh (limited adverse effect)
  • CHigh (limited adverse effect)
  • DModerate (limited adverse effect)

How the community answered

(19 responses)
  • A
    89% (17)
  • C
    5% (1)
  • D
    5% (1)

Why each option

FIPS Publication 199 defines three levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability), with 'Low' correlating to a limited adverse effect.

ALow (limited adverse effect)Correct

FIPS Publication 199, 'Standards for Security Categorization of Federal Information and Information Systems,' specifically defines 'Low' impact as a situation where the loss of confidentiality, integrity, or availability could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals. This definition directly matches the provided choice.

BHigh (limited adverse effect)

'High' impact in FIPS 199 corresponds to a severe or catastrophic adverse effect, not a limited adverse effect.

CHigh (limited adverse effect)

'High' impact in FIPS 199 corresponds to a severe or catastrophic adverse effect, not a limited adverse effect.

DModerate (limited adverse effect)

'Moderate' impact in FIPS 199 corresponds to a serious adverse effect, not a limited adverse effect.

Concept tested: FIPS 199 security impact levels

Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf

Topics

#FIPS 199#Impact Levels#Risk Assessment#CIA Triad

Community Discussion

No community discussion yet for this question.

Full CGRC Practice