1.3 System Categorization

The categorization has already been determined by another team as:

SC information system = {(confidentiality, LOW), (integrity, MODERATE), (availability, LOW)}

This results in a high water mark of MODERATE.

Section 2: Selecting Security Controls

List the security controls that have been selected based on the System categorization using FIPS-200 guidance and the NIST SP-800-53 baseline security controls.

Table 1. Selected Security Controls