Standards for Security Categorization of Federal Information and Information Systems

The E-Gov¿t. Act of 2002 recognized the importance of info. security to the economic and nat. security interests of the U.S. This pub. addresses the task of developing standards to be used by fed. agencies to categorize info. systems based on the objectives or providing appropriate levels of info. security according to a range of risk levels. Security categorization standards for info. systems provide a common framework and understanding for expressing security that promotes: (1) effective mgmt. and oversight of info. security programs throughout the civilian, nat. security, emergency preparedness, and law enforce. communities; and (2) consistent reporting on the adequacy and effectiveness of info. security policies, procedures, and practices.

Security Categorization Applied to Information Systems Determining the security
category of an information system requires slightly more analysis and must
consider the security categories of all information types resident on the
information ...