Certified Authorization Professional – CAP – Question360

Which of the following formulas was developed by FIPS 199 for categorization of an information system?

A.
SCinformation system = {(confidentiality, impact), (integrity, controls), (availability, risk)}
B. SCinformation system = {(confidentiality, risk), (integrity, impact), (availability, controls)}
C. SCinformation system = {(confidentiality, impact), (integrity, impact), (availability, impact)}
D. SCinformation system = {(confidentiality, controls), (integrity, controls), (availability, controls )}

Correct Answer: C