Which of the following formulas was developed by FIPS 199 for categorization of an
information system?
A.
SC information system = {(confidentiality, risk), (integrity, impact), (availability,
controls)}
B.
SC information system = {(confidentiality, impact), (integrity, controls), (availability,
risk)}
C.
SC information system = {(confidentiality, impact), (integrity, impact),(availability,
impact)}
D.
SC information system = {(confidentiality, controls), (integrity, controls), (availability,
controls )}