low-impact system

{
  "id": "MLC-T-CYB-002549",
  "term": "low-impact system",
  "field": "Cybersecurity",
  "definition": "1. An information system in which all three security objectives (i.e., confidentiality, integrity, and availability) are assigned a FIPS 199 potential impact value of low.\n\n2. An information system in which all three security properties (i.e., confidentiality, integrity, and availability) are assigned a FIPS 199 potential impact value of low. Note: For National Security Systems, CNSSI No. 1253 assigns one impact value (low, moderate, or high) for each of the three security objectives (confidentiality, integrity, and availability), rather than using the FIPS 200 high water mark across security objectives.\n\n3. A system in which all three security objectives (i.e., confidentiality, integrity, and availability) are assigned a FIPS Publication 199 potential impact value of low.",
  "references": [
    "FIPS 200; NIST SP 800-60 Vol. 1 Rev. 1 from FIPS 200; NIST SP 800-60 Vol. 2 Rev. 1 from FIPS 200",
    "CNSSI 4009-2022 from FIPS 200",
    "NIST SP 800-37 Rev. 2 from FIPS 200; NIST SP 800-53 Rev. 5 from FIPS 200; NIST SP 800-53A Rev. 5 from FIPS 200; NIST SP 800-53B from FIPS 200",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/low-impact-system/"
}