CISSP: Certified Information Systems Security Professional

A system’s security categorization and impact level determine the initial control baseline and influence the required security documentation and assessment effort. An incorrect categorization therefore affects subsequent activities in the certification and accreditation process.