The purpose of this standard is to assist Users, Stewards, Managers, and Information Service Providers in identifying what level of security is required to protect data for which they are responsible.

Using confidentiality, integrity, and availability to classify data. To determine the level of protections applied to a system, base your classification on the most confidential data stored in the ...