) For each of the following assets, assign a low, moderate, or high impact level
ID: 3536137 • Letter: #
Question
) For each of the following assets, assign a low, moderate, or high impact level for the loss of confidentiality, availability, and integrity, respectively. Justify your answers.
a. An organization managing public information on its Web server.
b. A law enforcement organization managing extremely sensitive investigative information.
c. A financial organization managing routine administrative information (not privacy related information).
d. An information system used for large acquisitions in a contracting organization contains both sensitive, pre-solicitation phase contract information and routine administrative information. Assess the impact for the two data sets separately and the information system as a whole.
e. A power plant contains a SCADA (supervisory control and data acquisition) system controlling the distribution of electric power for a large military installation. The SCADA system contains both real-time sensor data and routine administrative information. Assess the impact for the two data sets separately and the information system as a whole.
Explanation / Answer
Answers of D & E are in case of sensitive pre-solicitation phase contract data and real time data. For the cases of routine administrative work.
D. Confidentiality - Moderate
Availablilty - Low
Integrity - Moderate
E. Confidentiality - Low
Availablilty - Moderate
Integrity - Low.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.