System Categorization Suggestions
July 26, 2011Determining System Business and Technical Impact Level (Low, Moderate, High) Determine data classification (using NIST): (NIST SP 800-60 vol. I and II*) FIPS 200 / NIST SP 800-53 Use FIPS 199** if data type not in NIST SP 800-60 (i.e., C/I/A scoring) – NIST references below: NIST SP 800-34...