2002.14.g - Information systems that process, store, or transmit CUI

Question 1

In accordance with FIPS PUB 199, CUI Basic is categorized at no less than the ________ _______________ impact level.

Answer 1

moderate confidentiality

Question 2

___ ___ ___ defines the security impact levels for Federal information and Federal information systems

Answer 2

FIPS PUB 199

Question 3

Agencies must also apply the appropriate security requirements and controls from FIPS PUB 200 and NIST SP 800–53 to CUI in accordance with any ____-_____ _________ decisions they make.

Answer 3

risk-based tailoring

Question 4

Agencies may increase CUI Basic’s confidentiality impact level above moderate ____ __________, or by means of agreements with agencies or non-executive branch entities (including agreements for the operation of an information system on behalf of the agencies).

Answer 4

only internally

Question 5

Agencies may not otherwise require controls for CUI Basic at a level ______ or _________ from those permitted in the CUI Basic requirements when disseminating the CUI Basic outside the agency.

Answer 5

higher or different