Supports the maintenance, administration, and operation of offices buildings, fleets, machinery, and other capital assets considered as possessions of the organization. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of facilities, fleet, and equipment management information on the ability of responsible entities to maintain, administer, and operate offices buildings, fleets, machinery, and other capital assets of the organization. The consequences of unauthorized disclosure of most facilities, fleet, and equipment management information are likely to have only a limited adverse effect on organizational operations, organizational assets, or individuals.
Known mitigating factors toward changing the confidentiality level
Information associated with maintenance, administration, and operation of many organizational office buildings, transportation fleets, and operational facilities can be of material use to criminals seeking to gain access to organizational facilities in order to facilitate or perpetrate fraud, theft, or some other criminal enterprise (e.g., extract inmates from organizational detention facilities). In this case, unauthorized disclosure of information can have a serious adverse effect on organizational operations, organizational assets, or individuals. The consequent confidentiality impact would be at least moderate. Information associated with maintenance, administration, and operation of other organizational office buildings, transportation fleets, and operational facilities can be of material use to criminals seeking to penetrate and/or commandeer such facilities as part of operations intended to harm critical infrastructures, key organizational assets, or people. In these cases, the confidentiality impact must be considered to be high.
Integrity level = Low
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information. In addition, the consequences of unauthorized modification to or destruction of facilities, fleet, and equipment management information may depend on the urgency with which the information is needed or the immediacy with which the information is used. In most cases, it is unlikely that the information will be time-critical or acted upon immediately.
Known mitigating factors toward changing the integrity level
Exceptions may include emergency response aspects of disaster management or leadership protection. In such cases, the integrity impact level associated with unauthorized modification or destruction of facilities, fleet, and equipment management information can be high.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to the facilities, fleet, and equipment management information. Functions supported by most facilities, fleet, and equipment management information is tolerant of delays. Typically, disruption of access to facilities, fleet, and equipment management information has a limited adverse effect on organizational operations (including mission functions and public confidence in the organization), organizational assets, or individuals.
Known mitigating factors toward changing the availability level
Exceptions may include emergency response aspects of disaster management or leadership protection. In such cases, delays measured in seconds can cost lives and major property damage. Consequently, the availability impact level associated with unauthorized modification or destruction of facilities, fleet, and equipment management information needed to respond to emergencies will be high.