Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Guide for Mapping Types of Information and Information Systems to Security Categories (2 vols.)

Published

Author(s)

William C. Barker, Annabelle Lee

Abstract

[Superseded by SP 800-60 Rev. 1 (August 2008): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=152106] Title III of the E-Government Act, titled the Federal Information Security Management Act (FISMA) of 2002, tasked NIST to develop (1) standards to be used by all Federal agencies to categorize information and information systems collected or maintained by or on behalf of each agency based on the objectives of providing appropriate levels of information security according to a range of risk levels; and (2) guidelines recommending the types of information and information systems to be included in each such category. Special Publication 800-60 was issued in response to the second of these tasks. Volume I contains the basic guidelines for mapping types of information and information systems to security categories. The appendices contained in Volume II include security categorization recommendations and rationale for mission-based and management and support information types.
Citation
Special Publication (NIST SP) - 800-60 Ver 2.0
Report Number
800-60 Ver 2.0

Keywords

computer security, cyber security, FISMA, categorization, information type, security category

Citation

Barker, W. and Lee, A. (2004), Guide for Mapping Types of Information and Information Systems to Security Categories (2 vols.), Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD (Accessed March 2, 2024)
Created June 10, 2004, Updated February 19, 2017