Scribd
Upload
306 views2 pages

Appendix 1 - Asset Classification Matrix

The document describes an asset classification matrix that rates the potential impact of losses of confidentiality, integrity and availability of information and systems as low, moderate or high. A moderate impact is defined as seriously impacting operations, assets or individuals, while a high impact is defined as having severe or catastrophic effects.

Uploaded by

Asim Mushtaq
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
306 views2 pages

Appendix 1 - Asset Classification Matrix

The document describes an asset classification matrix that rates the potential impact of losses of confidentiality, integrity and availability of information and systems as low, moderate or high. A moderate impact is defined as seriously impacting operations, assets or individuals, while a high impact is defined as having severe or catastrophic effects.

Uploaded by

Asim Mushtaq
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd

Asset Classification Matrix

LOW MODERATE
The unauthorized disclosure of
The unauthorized disclosure of information
information could beexpected to have
could be expected to have a serious impact on
Confidentiality limited or no impact on organizational
organizational operations, organizational assets,
operations, organizational assets, or
or individuals.
individuals.

The unauthorized modification or The unauthorized modification or destruction


destruction of information could be of information could be expected to have a
expected to have limited or no impact serious impact on
Integrity
on organizational operations, organizational operations, organizational assets,
organizational assets, or individuals. or individuals.

The disruption of access to or use of The disruption of access to or use of


information or an Information System information or an Information System could be
could be expected to have limited or no expected to have a serious impact on
Availability impact on organizational operations, organizational operations, organizational assets,
organizational assets, or individuals. or individuals.
trix
HIGH
The unauthorized disclosure of
information could be expected to have
a severe or catastrophic impact on
organizational operations,
organizational assets or individuals.

The unauthorized modification


or destruction of information could be
expected to have a severe or
catastrophic impact on organizational
operations, organizational assets, or
individuals.

The disruption of access to or use of


information or an Information System
could be expected to have a severe or
catastrophic impact on organizational
operations, organizational assets, or
individuals.

You might also like