Permits and Licensing involves activities associated with granting, revoking, and the overall management of the documented authority necessary to perform a legally controlled task or function. The overall accountability rating for this information classification is Low.
Confidentiality level = Low
The confidentiality impact level is the effect of unauthorized disclosure of permits and licensing information on the abilities of responsible entities to manage the documented authority necessary to perform a regulated or otherwise legally controlled task or function. The consequences of unauthorized disclosure of the majority of permits and licensing information will result in a limited adverse effect on organizational operations, organizational assets, or individuals.
Known mitigating factors toward changing the confidentiality level
Where more sensitive information is involved, it will typically be personal information subject to the various state and international privacy laws, the Health Insurance Portability and Accountability Act of 1996, or other laws and executive orders affecting the dissemination of information regarding individuals. The various state and international privacy laws Information provisional impact levels are documented in the Personal Identity and Authentication information type. In such cases, the consequences of unauthorized disclosure of permits and licensing information could be serious. In such cases, the confidentiality impact level might be moderate.
Integrity level = Low
The integrity impact level is based on the specific mission and the data supporting that mission, not on the time required to detect the modification or destruction of information. The consequences of unauthorized modification or destruction of permits and licensing information depends primarily on the criticality of the regulated activity with respect to protection of organizational assets, and safety of individuals. Typically, the effects of modification or deletion of permits and licensing information are limited with respect to organizational missions or assets.
Availability level = Low
The availability impact level is based on the specific mission and the data supporting that mission, not on the time required to reestablish access to permits and licensing information. The nature of permits and licensing processes is tolerant of reasonable delays.