Critical Systems and Information Forms
Having an inventory of existing equipment and being able to track the organization's documents is just part of the task. If the organization has not provided you with information on critical information and systems, you will have to work with them to determine these items. The Organization Information Criticality Matrix (OICM) is shown in Table B.3 and the Systems Criticality Matrix is shown in Table B.4.
OICM |
Confidentiality |
Availability |
Integrity |
---|---|---|---|
High Watermark |
SCM |
Confidentiality |
Availability |
Integrity |
---|---|---|---|
High Watermark |