FIPS 199 defines the three levels of potential impact on organizations. Which of the following
potential impact levels shows limited adverse effects on organizational operations, organizational
assets, or individuals?
A.
Moderate
B.
Low
C.
Medium
D.
High
Explanation:
The potential impact is called low if the loss of confidentiality, integrity, or availability
is expected to have a limited adverse effect on organizational operations, organizational assets, or
is incorrect. The potential impact is known to be moderate if the loss of confidentiality, integrity, or
availability is expected to have a serious adverse effect on organizational operations,
the loss of confidentiality, integrity, or availability is expected to have a severe or catastrophic
adverse effect on organizational operations, organizational assets, or individuals.