Which of the following potential impact levels shows limited adverse effects on organizational operations, organizational assets, or individuals?

FIPS 199 defines the three levels of potential impact on organizations.

Which of the following potential impact levels shows limited adverse effects on organizational operations, organizational assets, or individuals?
A . Moderate
B . Low
C . Medium
D . High

View Answer

Answer: B

Explanation:

The potential impact is called low if the loss of confidentiality, integrity, or availability is expected to have a limited adverse effect on organizational operations, organizational assets, or individuals.

ANS: C is incorrect. Such a type of potential impact level does not exist ANS: A is incorrect. The potential impact is known to be moderate if the loss of confidentiality, integrity, or availability is expected to have a serious adverse effect on organizational operations, organizational assets, or individuals.

ANS: D is incorrect. The potential impact is called high if the loss of confidentiality, integrity, or availability is expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals.