Supports the active building of capacities in staff members through formal education, technical training, or other means of education. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of resource training and development information on the ability of responsible entities to build capacities in staff members through formal, technical, or other means of education. In most cases, unauthorized disclosure of resource training and development information will have only a limited adverse effect on organizational operations, assets, or individuals.
Known mitigating factors toward changing the confidentiality level
Where more sensitive information is involved, it will probably be personal information subject to the various state and international privacy laws. The various state and international privacy laws Information provisional impact levels are documented in the Personal Identity and Authentication information type. This can result in assignment of a moderate impact level to such information.
Integrity level = Low
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information. The consequences of unauthorized modification or destruction of resource training and development information depends mostly on the criticality of the information with respect to organizational mission capability, protection of organizational assets, and safety of individuals. Although there can be serious short-term effects for individuals, the effects of modifications or deletion of this information are generally limited with respect to organizational mission capabilities or assets.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to the payroll management and expense reimbursement information. Typically, resource training and development processes are tolerant of reasonable delays.