Organizations must categorize their data according to how confidential, integral to operations, and available it needs to be to best protect it. Data should be categorized into sets like PII, ePHI, and trade secrets. Categorizing data is important because it allows organizations to know the potential impact if the data is compromised, and to apply the appropriate protections. The Federal Information Security Management Act (FISMA) provides standards for categorizing data based on confidentiality, integrity, and availability.

1. Respond to the following in a
minimum of 250 words:
Organizations need to know the value of their data to find the
best way to protect it. The data must be categorized according
to the organization’s level of concern for confidentiality,
integrity, and availability. The potential impact on assets and
operations should be known in case data, systems, and/or
networks are compromised (through unauthorized access, use,
disclosure, disruption, modification, or destruction).
Review course materials and Research Materials below.
Describe three data sets (PII, ePHI, trade secrets, etc.) an
organization might have.
Describe why data classification and categorization are
important.
Use the
Standards for Security Categorization of Federal Information
and Information Systems
categorization technique to categorize each data set.