Page History
...
NOTE: Most systems can be described by using just 1 or 2 information categories from NIST 800-60 Volume 2. In rare cases, a system owner might need to use more than that, but be careful not to choose categories that are a "stretch" or that are not part of the mission/function of the system. Usually, a careful review of the description in 800-60 Volume 2 will help avoid un-necessary inclusion of additional categories.
FIPS-199 resources
- Blank template - FIPS-199
- Sample completed FIPS-199 form
- NIST 800-60 Volume II Appendices