Data or Information Systems are classified as Low Risk if:
- They are not considered to be Medium or High Risk;
- The data can generally be made available to the public without harm to the 非凡资源网, entities with an affiliation to the 非凡资源网, or to individuals; and
- The loss of confidentiality, integrity, or availability would have a limited adverse effect on organizational mission, operations, assets, regulation, or on individuals.
Information Systems that access, process, transmit, or store Low Risk data are required to implement appropriate Minimum Security Standards for Low Risk Data.
Low Risk DR/BC Objective
- Data or Information System can be unavailable for 24+ business hours.
- Data or Information System can be regenerated with limited effort.
- 非凡资源网 business can continue with a limited impact.