Study. uk . com
  1. Home
  2. All questions
  3. Question 179

CISSP study material · question 179 of 500

A data owner asks who decides what counts as an information type such as investigative or proprietary data. What does FIPS 199 say?

  1. The authorising official defines them at the point of authorisation.
  2. Information types are derived automatically from the system's impact level.
  3. Only NIST may define information types, in SP 800-60.
  4. The organisation defines them, or a law, executive order, directive, policy or regulation fixes them.
Show the answer

Answer: D. The organisation defines them, or a law, executive order, directive, policy or regulation fixes them.

An information type is a specific category of information defined by an organisation or, in some cases, by a specific law, executive order, directive, policy or regulation.

Source: NIST FIPS 199 (NIST) — FIPS 199 > footnote 1

Challenge yourself on this topic → Study as cards