Term:Impact Code

From FISMApedia
Jump to: navigation, search

DoDI 8510.01

Impact Code - For the purpose of this Instruction, a code indicating the consequences of a non-compliant IA control. It is an indicator of the impact associated with exploitation of the IA control. In conjunction with the severity category, it also indicates the urgency with which corrective action should be taken. Impact codes are expressed as high, medium, and low, with high indicating the greatest impact.

E2.31.1.  High Impact Code. The absence or incorrect  implementation of the  IA control may have a severe or catastrophic effect on system operations, management, or  information sharing.  Exploitation of the weakness may result in the  destruction of  information resources and/or the complete loss of  mission  capability.
E2.31.2.  Medium Impact Code. The absence or incorrect  implementation of the  IA control may have a serious adverse effect on system operations, management, or  information sharing.  Exploitation of the weakness may result in loss of  information resources and/or the significant degradation of  mission  capability.
E2.31.3.  Low Impact Code. The absence or incorrect  implementation of the  IA control may have a limited adverse effect on system operations, management, or  information sharing.  Exploitation of the weakness may result in temporary loss of  information resources and/or limit the effectiveness of  mission  capability. E2.31.