Study. uk . com
  1. Home
  2. All questions
  3. Question 171

CISSP study material · question 171 of 500

An analyst must translate FIPS 199 impact levels into plain language for a business audience. Which mapping is correct?

  1. Low is a limited adverse effect, moderate a serious one, and high a severe or catastrophic one.
  2. Low is negligible, moderate is limited, and high is serious.
  3. Low affects one system, moderate affects a business unit, and high affects the organisation.
  4. Low is recoverable within a day, moderate within a week, and high beyond a week.
Show the answer

Answer: A. Low is a limited adverse effect, moderate a serious one, and high a severe or catastrophic one.

FIPS 199 defines low as a limited adverse effect, moderate as a serious adverse effect, and high as a severe or catastrophic adverse effect on operations, assets or individuals.

Source: NIST FIPS 199 (NIST) — FIPS 199 > Potential Impact on Organizations and Individuals

Challenge yourself on this topic → Study as cards