Has this venture ever been purchased with your operating expenses? No Yes, explain: If Funding being used? No Yes How many years out does the grant funding cover? If the identified funding source is removed, are there other funding sources for out-year expenses? INFORMATION SECURITY PLANNING Classification - Classification of the system is used to determine the necessary security safeguards. Information that is authorized for release to the public. Public Information that is available to business units and used for official purposes and would not be Secure released to the public unless specifically requested and authorized Information that is available only to designated personnel and would not be released to the public. Sensitive Indicate data Criminal Investigation Homeland Security FEIN Personal Financial Personal Medical Social Security # Personally Identifiable Business Other User Access Controls (a) How do you expect users to access the system? (check all that apply) Public Internet Intranet Partner Extranet (b) Will users view or edit sensitive data? No Sensitive Data shown View Edit Potential Loss Impact: For each category below, select the level of impact to that best identifies the protection needed from unauthorized alteration or access to the data, or loss of system access. (FIPS PUB 199) Security Objective LOW MODERATE HIGH Confidentiality The unauthorized The unauthorized The unauthorized disclosure of information disclosure of information disclosure of information Preserving authorized could be expected to could be expected to could be expected to have restrictions on have a limited adverse have a serious adverse a severe or catastrophic information access and effect on organizational effect on organizational adverse effect on disclosure, including operations, operations, organizational organizational operations, means for protecting organizational assets, or assets, or individuals. organizational assets, or personal privacy and individuals. individuals. proprietary information. [44 U.S.C., SEC. 3542] Integrity The unauthorized The unauthorized The unauthorized modification or modification or modification or destruction Guarding against improper destruction of destruction of information of information could be information modification information could be could be expected to expected to have a or destruction, and expected to have a have a serious adverse severe or catastrophic includes ensuring
Has this venture ever been purchased with your operating expenses? No Yes, explain: If Funding being used? No Yes How many years out does the grant funding cover? If the identified funding source is removed, are there other funding sources for out-year expenses? INFORMATION SECURITY PLANNING Classification - Classification of the system is used to determine the necessary security safeguards. Public Information that is authorized for release to the public. Secure Information that is available to business units and used for official purposes and would not be released to the public unless specifically requested and authorized Sensitive Information that is available only to designated personnel and would not be released to the public. Indicate data Criminal Investigation Homeland Security FEIN Personal Financial Personal Medical Social Security # Personally Identifiable Business Other User Access Controls (a) How do you expect users to access the system? (check all that apply) Public Internet Intranet Partner Extranet (b) Will users view or edit sensitive data? No Sensitive Data shown View Edit Potential Loss Impact: For each category below, select the level of impact to that best identifies the protection needed from unauthorized alteration or access to the data, or loss of system access. (FIPS PUB 199) Security Objective LOW MODERATE HIGH Confidentiality Preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary information. [44 U.S.C., SEC. 3542] The unauthorized disclosure of information could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals. The unauthorized disclosure of information could be expected to have a serious adverse effect on organizational operations, organizational assets, or individuals. The unauthorized disclosure of information could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals. Integrity Guarding against improper information modification or destruction, and includes ensuring The unauthorized modification or destruction of information could be expected to have a The unauthorized modification or destruction of information could be expected to have a serious adverse The unauthorized modification or destruction of information could be expected to have a severe or catastrophic