Formulas developed by FIPS 199 for information type categorization
Question
Which of the following formulas was developed by FIPS 199 for categorization of an information type?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.B.
The answer is B. SC information type = {(confidentiality, impact), (integrity, impact), (availability, impact)}.
This formula was developed by FIPS 199, which is a standard developed by the National Institute of Standards and Technology (NIST) in the United States. The formula is used to categorize information types according to their security requirements.
In this formula, SC stands for security categorization, and the information type is categorized based on three security objectives: confidentiality, integrity, and availability. Each security objective is associated with an impact level, which represents the potential harm that could result from a security breach or failure. The impact levels are defined as low, moderate, or high.
The formula categorizes the information type based on the highest impact level associated with any of the three security objectives. For example, if the impact level for confidentiality is high, the impact level for integrity is moderate, and the impact level for availability is low, the information type would be categorized as having a high impact level.
Overall, this formula provides a standardized way to categorize information types based on their security requirements, which can help organizations to identify and prioritize their security needs.
