Supports all functions pertaining to the securing of organizational data and systems through the creation and definition of security policies, procedures and controls. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of IT security information on the ability of responsible entities to secure organizational data and systems through the creation and definition of security policies, procedures and controls covering such services as identification, authentication, and nonrepudiation. In most cases, the security policy, procedures, and available controls are not particularly sensitive. Typically, the security information is used in initializing and implementing the controls (e.g., passwords, cryptographic keys) that need to be protected. In general, disclosure of the security policies, procedures, and controls will result in only limited adverse effects on the confidentiality system information and processes.
Integrity level = Moderate
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to IT security information. Temporary disruption of access to IT security information can usually be expected to have a limited adverse effect on organizational operations (including mission functions and public confidence in the organization), organizational assets, or individuals.