Approved by: ________________________________________ Date: ___________________ Rock Rakowski, Manager, Office of Security Appendix A - System and Information Security Level Matrix Potential Impact Security Objective Low Moderate High The unauthorized The unauthorized The unauthorized disclosure of Confidentiality: disclosure of disclosure of information have a severe or information would information would catastrophic adverse effect on State Preserving authorized have limited have a serious adverse of operations, assets, or individuals. restrictions on information adverse effect on effect on State of access and disclosure, including State of operations, assets, or for protecting personal operations, assets, individuals. Example(s): privacy and proprietary or individuals. Highly sensitive information information. that may affect human life or Example(s): safety (e.g. under cover Personal investigation information; Example(s): information confidential response plans for Public affecting an emergencies) Information individual’s privacy (e.g. an Information that if released Information individual’s violate State or Federal Law medical available via information; Freedom of Significant amount of privacy Information driver’s license information (e.g. thousands of number; social Act individuals credit card numbers; security number; social security numbers; banking banking information; medical information, information, etc…) etc…)
Approved by: ________________________________________ Date: ___________________ Rock Rakowski, Manager, Office of Security Appendix A - System and Information Security Level Matrix Security Objective Potential Impact Low Moderate High Confidentiality: Preserving authorized restrictions on information access and disclosure, including for protecting personal privacy and proprietary information. The unauthorized disclosure of information would have limited adverse effect on State of operations, assets, or individuals. Example(s): Public Information Information available via Freedom of Information Act The unauthorized disclosure of information would have a serious adverse effect on State of operations, assets, or individuals. Example(s): Personal information affecting an individual’s privacy (e.g. an individual’s medical information; driver’s license number; social security number; banking information, etc…) The unauthorized disclosure of information have a severe or catastrophic adverse effect on State of operations, assets, or individuals. Example(s): Highly sensitive information that may affect human life or safety (e.g. under cover investigation information; confidential response plans for emergencies) Information that if released violate State or Federal Law Significant amount of privacy information (e.g. thousands of individuals credit card numbers; social security numbers; banking information; medical information, etc…)