CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ177

VerifiedSecure Software Requirements

In 2003, NIST created a new Certification & Accreditation (C&A) guideline called FIPS 199. Which potential-impact levels does FIPS 199 define? Each correct answer is a complete solution. Choose all that apply.

Choose three
Explanation

FIPS 199 categorizes the potential impact of a loss of confidentiality, integrity, or availability as low, moderate, or high. It does not define a “medium” level.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!