Regulatory Creation

Supports the activities of researching and drafting proposed and final regulations. The overall accountability rating for this information classification is Low.

Confidentiality level = Low

The level of confidentiality impact level is the effect of unauthorized disclosure of regulatory creation information on the ability of responsible entities to research and draft proposed and final regulations. The effects of loss of confidentiality of early drafts of regulations can result in attempts by affected entities and other affected parties to influence and/or impede the regulation development process.

Known mitigating factors toward changing the confidentiality level

Premature public release of draft regulations before internal coordination and review has been conducted can result in unnecessary criticism of the proposed regulation and even damage internal confidence in the organization. In such cases, the provisional confidentiality impact level recommended for regulatory creation information is moderate. These consequences are particularly likely where the release includes unedited internal commentary and discussion. Delays can impair an organization’s mission, but loss of internal confidence can do serious and persistent harm to an organization’s ability to effectively perform its mission.

Integrity level = Low

The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information.

Known mitigating factors toward changing the integrity level

Unauthorized modification or destruction of information affecting external communications that contain regulatory information (e.g., web pages, electronic mail) may adversely affect operations or public confidence in the organization. The consequences of a reduction in public confidence will be more serious for entities that have national defense, intelligence, or information security missions. In such cases, the impact level may be at least moderate.

Availability level = Low

The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to the regulatory creation information. The regulatory creation process is usually tolerant of delays.



Site and content © Copyright 2003-2009 Network Frontiers, LLC. All rights reserved.