Certified Administrative Professional (CAP) Practice Exam 2026 – Your All-in-One Guide to Exam Mastery!

The categorization provided by SP 800-60 is focused on impact levels, which are essential for understanding and managing the security and privacy requirements associated with information systems. This framework is used to assess the potential impact of a loss of confidentiality, integrity, or availability of information on organizations and individuals.

Impact levels help organizations determine the necessary security controls needed to protect their information systems based on the severity of potential adverse impacts. By establishing a clear classification system, SP 800-60 aids in guiding the selection and implementation of security measures that align with the significance of the information being protected. This categorization is an important component of risk management and includes considerations for systems at various levels of sensitivity.