1b: Data Classification Process and Models

Lecture presentation

Quiz and solutions

What are the 3 types of risk mitigating controls? Which is the most important?  Why is it the most important?

How would you apply the security categorization standards (FIPS 199) to decide if each of the information security risk mitigations (“safeguards”) described in the Guidelines for Providing Appropriate Access to Geospatial Data in Response to Security Concerns are needed?

Which two information security objectives could be put at risk if the mitigations (i.e. “safeguards”) recommended by the Guidelines for Providing Appropriate Access to Geospatial Data in Response to Security Concerns are applied?  Explain how each of the security objectives is put at risk by the safeguards.