Level of Concern

The Level of Concern is a rating assigned to an Information System (IS) by the Designated Approving Authority (DAA). A separate Level of Concern is assigned to each IS for Confidentiality, Integrity and Availability, with further categorization as Basic, Medium, or High: • Confidentiality: Based on the information it maintains, processes, and transmits. • Integrity: Based on the degree for resistance to unauthorized modifications. • Availability: Timely, reliable access to data and information services for authorized users