Supports the administration and determination of organizational employee compensation. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of payroll management and expense reimbursement information on the ability of responsible entities to administer and determine organizational employee compensation. In most cases, unauthorized disclosure of payroll management and expense reimbursement information will have only a limited adverse effect on organizational operations, assets, or individuals.
Known mitigating factors toward changing the confidentiality level
Where more sensitive information is involved, it will probably be personal information subject to the various state and international privacy laws. The various state and international privacy laws Information provisional impact levels are documented in the Personal Identity and Authentication information type. In a few cases (e.g., where some employees are potential targets for retaliation by criminal elements or targets of foreign intelligence organizations), unauthorized disclosure of some payroll management and expense reimbursement information (e.g., name, address, title, organization, dependents’ information) can have life-threatening consequences and has a high confidentiality impact level.
Integrity level = Low
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information. Payroll management and expense reimbursement activities are not generally time-critical.
Known mitigating factors toward changing the integrity level
An accumulation of small changes to data or deletion of small entries can result in excessive disbursements. In some cases, the adverse effects of consequent negative publicity on mission functions or public confidence in the organization can be serious. In some other cases (e.g., where an organization’s mission is strongly dependent on organized labor), integrity compromises that adversely affect a significant subset of the workforce can result in work stoppages that adversely affect the organization’s mission. Where interruptions to organizational missions can have serious or life-threatening consequences for individuals, the impacts of integrity compromises can be moderate or even high.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to the payroll management and expense reimbursement information. Payment processes are generally tolerant of delay. Typically, disruption of access to payroll management and expense reimbursement information can be expected to have only a limited adverse effect on organizational operations, organizational assets, or individuals.
Known mitigating factors toward changing the availability level
In some cases (e.g., where an organization’s mission is strongly dependent on organized labor), loss of availability of information that adversely affects a significant subset of the workforce can result in work stoppages that adversely affect the organization’s mission. Where interruptions to organizational missions can have serious or life-threatening consequences for individuals, the impacts of availability compromises can be moderate or even high.