HHS Information Technology Security Program

– Information type as provided by NIST SP 800-60. Reference – the NIST SP 800-60 paragraph reference for this SC. Description – SC description from NIST SP 800-60. Security Objectives (SO) – Confidentiality (C)/Integrity (I)/Availability (A) from NIST SP 800-60. Impact – A “high-water-mark” impact rating for each SC. ................
................