Which NIST document lists information types and their associated provisional impact level?

Which NIST document lists information types and their associated provisional impact level?

• A. SP 800-53
• B. SP 800-53a
• C. SP 800-60
• D. SP 800-61

Answer: (C)

The National Institute of Standards and Technology (NIST) Special Publication 800-60 is the document that specifically addresses the categorization of information types and maps them to their associated provisional impact levels. This document is critical for federal agencies in determining how different types of information can affect organizational operations, assets, or individuals in the event of a compromise. It provides guidelines on how to assess the impact of the loss of confidentiality, integrity, and availability of various data types. By establishing the framework for categorizing information types based on their potential impacts, SP 800-60 plays a foundational role in risk management and security controls selection, which are further elaborated on in other NIST publications. This makes it an essential resource for those in the field of IT security, especially when establishing security baselines according to the Federal Information Security Management Act (FISMA). Other documents such as SP 800-53 and SP 800-53a provide details on security and privacy controls and their assessment, while SP 800-61 focuses on computer security incident handling. Although these documents contribute to the overall security framework, they do not specifically address the mapping of information types to their impact levels as SP 800-60 does. This differentiation highlights why SP 800

The National Institute of Standards and Technology (NIST) Special Publication 800-60 is the document that specifically addresses the categorization of information types and maps them to their associated provisional impact levels. This document is critical for federal agencies in determining how different types of information can affect organizational operations, assets, or individuals in the event of a compromise. It provides guidelines on how to assess the impact of the loss of confidentiality, integrity, and availability of various data types.

By establishing the framework for categorizing information types based on their potential impacts, SP 800-60 plays a foundational role in risk management and security controls selection, which are further elaborated on in other NIST publications. This makes it an essential resource for those in the field of IT security, especially when establishing security baselines according to the Federal Information Security Management Act (FISMA).

Other documents such as SP 800-53 and SP 800-53a provide details on security and privacy controls and their assessment, while SP 800-61 focuses on computer security incident handling. Although these documents contribute to the overall security framework, they do not specifically address the mapping of information types to their impact levels as SP 800-60 does. This differentiation highlights why SP 800