The potential impact is low
if the loss could be expected to have a limited adverse effect on organizational
operations, organizational assets, or individuals.
Source: NIST SP800-37
enumeration
MODERATE
The potential impact is moderate
if the loss could be expected to have a serious adverse effect on organizational
operations, organizational assets, or individuals.
Source: NIST SP800-37
enumeration
HIGH
The potential impact is high
if the loss could be expected to have a severe or catastrophic adverse effect on
organizational operations, organizational assets, or individuals.
<xsd:simpleType name="ImpactLevelEnum"><xsd:annotation><xsd:documentation><p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">The security categorization impact levels.</p></xsd:documentation></xsd:annotation><xsd:restriction base="xsd:token"><xsd:enumeration ism:classification="U" ism:ownerProducer="USA" value="LOW"><xsd:annotation><xsd:documentation><p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">The potential impact is low if the loss could be expected to have a limited adverse effect on organizational operations, organizational assets, or individuals.</p><p xmlns="http://www.w3.org/1999/xhtml" ism:ownerProducer="USA" ism:classification="U">Source: NIST SP800-37</p></xsd:documentation></xsd:annotation></xsd:enumeration><xsd:enumeration ism:classification="U" ism:ownerProducer="USA" value="MODERATE"><xsd:annotation><xsd:documentation><p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">The potential impact is moderate if the loss could be expected to have a serious adverse effect on organizational operations, organizational assets, or individuals.</p><p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">Source: NIST SP800-37</p></xsd:documentation></xsd:annotation></xsd:enumeration><xsd:enumeration ism:classification="U" ism:ownerProducer="USA" value="HIGH"><xsd:annotation><xsd:documentation><p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">The potential impact is high if the loss could be expected to have a severe or catastrophic adverse effect on organizational operations, organizational assets, or individuals.</p><p xmlns="http://www.w3.org/1999/xhtml" ism:classification="U" ism:ownerProducer="USA">Source: NIST SP800-37</p></xsd:documentation></xsd:annotation></xsd:enumeration></xsd:restriction></xsd:simpleType>
Schema location
BOE.xsd Copy and paste this link to your file browser, clicking the link MAY open in the browser. Opening in an XML aware editor is best.
This document has been approved for Public Release by the Office of the Director of National Intelligence. See Distribution Notice for details.
Click Here