General Retirement and Disability Program Management involves the development and management of retirement benefits, pensions, and income security for those who are retired or disabled. The overall accountability rating for this information classification is Moderate.
Confidentiality level = Moderate
The confidentiality impact level is the effect of unauthorized disclosure of general retirement and disability information on the ability of responsible entities to develop and manage retirement benefits, pensions, and income security for those who are retired or disabled. The consequences of limited unauthorized disclosure of retirement and disability information would have a limited adverse effect on organizational operations, organizational assets, or individuals. The disclosure of privacy information (e.g., information required by the various state and international privacy laws or other statutes and executive orders to receive special handling to protect the privacy of individuals) may have serious consequences. The various state and international privacy laws Information provisional impact levels are documented in the Personal Identity and Authentication information type. Unauthorized disclosure of large amounts of general retirement and disability information may result in significant damage to an organization’s image or operation.
Integrity level = Moderate
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information. Unauthorized modification or destruction of information affecting external communications (e.g., web pages, electronic mail) may adversely affect operations and/or public confidence in the organization, but the damage to the mission would usually be limited. Generally, the consequences of unauthorized modification or destruction of general retirement and disability information would have a limited adverse effect on organizational operations, organizational assets, or individuals. However, where provision of retirement and/or disability benefits is a primary organizational service delivery mission, the consequences can be more severe.
Known mitigating factors toward changing the integrity level
Integrity compromises may result in reduction of benefits– and in extreme cases can be life threatening. This can result in assignment of a high impact level to such information.
Availability level = Moderate
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to general retirement and disability information. The effects of disruption of access to general retirement and disability information or information systems would have, in many cases, a limited adverse effect on organizational operations, organizational assets, or individuals.
Known mitigating factors toward changing the availability level
Where provision of retirement and/or disability benefits is a primary organizational service delivery mission, the consequences can be more severe. Availability compromises may result in reduction of benefits – and in extreme cases can be life threatening. This can result in assignment of a high impact level to such information.