Data or Information Systems are classified as Low Risk if:
- They are not considered to be Medium or High Risk;
- The data can generally be made available to the public without harm to the 福利区一区, entities with an affiliation to the 福利区一区, or to individuals; and
- The loss of confidentiality, integrity, or availability would have a limited adverse effect on organizational mission, operations, assets, regulation, or on individuals.
Information Systems that access, process, transmit, or store Low Risk data are required to implement appropriate Minimum Security Standards for Low Risk Data.
Low Risk DR/BC Objective
- Data or Information System can be unavailable for 24+ business hours.
- Data or Information System can be regenerated with limited effort.
- 福利区一区 business can continue with a limited impact.