Data not properly Moderate Moderate Agency to develop a data classified lead to the classification by which it assigns a following: level of sensitivity and an owner to each piece of information that it Confidentiality risks owns and maintains. Classifies – These risks represent information and the system in unauthorized access, use accordance with applicable federal disclosure, disruption, laws, Executive Orders, directives, modification, perusal, policies, regulations, standards, and inspection, recording or guidance destruction of information. Compliancy with DTMB Policy Integrity risks 1340.00 Information Technology – risks represent Security 1. Lack of data threats to business classification by resources from Agency unauthorized users and malicious code that attempts to corrupt the business data or system on which it relies. Availability risks These – risks represent threats to business processes by unauthorized users and malicious code that attempt to disrupt the way business is done and how information is processed.
1. Lack of data classification by Agency Data not properly classified lead to the following: Confidentiality risks – These risks represent unauthorized access, use disclosure, disruption, modification, perusal, inspection, recording or destruction of information. Integrity risks – risks represent threats to business resources from unauthorized users and malicious code that attempts to corrupt the business data or system on which it relies. Availability risks – These risks represent threats to business processes by unauthorized users and malicious code that attempt to disrupt the way business is done and how information is processed. Moderate Moderate Agency to develop a data classification by which it assigns a level of sensitivity and an owner to each piece of information that it owns and maintains. Classifies information and the system in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance Compliancy with DTMB Policy 1340.00 Information Technology Security