Direct loans involve a disbursement of funds by the organization to a non-organizational borrower under a contract that requires the repayment of such funds with or without interest. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of direct loan information on the ability of responsible entities to disburse organizational funds to non-organizational borrowers under contract terms that require the repayment of such funds with or without interest. Much direct loan information includes information covered by the provisions of the various state and international privacy laws. (The various state and international privacy laws Information provisional impact levels are documented in the Personal Identity and Authentication information type.) In most cases, unauthorized disclosure of direct loan information will have only a limited adverse effect on organizational operations, assets, or individuals.
Known mitigating factors toward changing the confidentiality level
Unauthorized disclosure of large volumes of information protected under the various state and international privacy laws can be expected to have a serious to severe effect on public confidence in the organization. In such cases, the confidentiality impact can be moderate.
Integrity level = Low
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information. Loan assistance activities are not generally time-critical. In most cases, the adverse effects of unauthorized modification or destruction of direct loan information on organizational mission functions and public confidence in the organization will be limited.
Known mitigating factors toward changing the integrity level
There are significant differences between the ability to modify a document authorizing a payment and the modification of the payment itself. The unauthorized modification of a document authorizing a payment is less time critical than the modification of the payment itself while the payment is in transit. Modifications to payments in transit will result in immediate inaccurate payments. This can result in assignment of a moderate impact level to such information.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to direct loan information. Loan assistance processes are generally tolerant of delay. In most cases, disruption of access to direct loan information can be expected to have only a limited adverse effect on organizational operations, organizational assets, or individuals.