Guide for Mapping Types of Information and Information Systems to Security Categories, Volume 2: Appendices
Section 4.2.3 and 4.4.2. > C.2 Rationale and Factors for Services Delivery Support Information > C.2.3 Planning and Budgeting > C.2.3.4 Strategic Planning Information Type

C.2.3.4 Strategic Planning Information Type

Strategic Planning entails the determination of long-term goals and the identification of the best
approach for achieving those goals. The recommended provisional security categorization for
strategic planning information is as follows:
Security Category = {(confidentiality, Low), (integrity, Low), (availability, Low)}
13 The Office of Management and Budget (OMB) has placed some emphasis on protecting repositories of this
information. Among other things it may contain details of the technology and security of an agency's network and
include information about critical repositories of highly sensitive and/or even National Security information.
The confidentiality impact level is the effect of the unauthorized disclosure of strategic planning
information on the ability of responsible agencies to determine long-term goals and to identify
the best approach for achieving those goals. Premature public release of draft plans before
internal coordination and review can result in unnecessary damage to public confidence in the
agency. This is particularly likely where the release includes unedited internal commentary and
discussion. However, the consequence of loss of confidentiality of most strategic planning
information is likely to do only limited harm to government assets, personnel, or missions.
Special Factors Affecting Confidentiality Impact Determination: Unauthorized disclosure of some of
the background information that supports development of some Federal strategic plans can reveal
sensitive vulnerabilities, capabilities, or methods of anti-terrorism, law enforcement, or national
security activities. Depending on the information in question, the confidentiality impact can be
moderate, high, or involve national security information (outside the scope of this guideline).
Also, some strategic plans are themselves national security information.
Recommended Confidentiality Impact Level: The provisional confidentiality impact level
recommended for strategic planning information is low.
not on the time required to detect the modification or destruction of information.
Special Factors Affecting Integrity Impact Determination: Unauthorized modification or destruction
of information affecting external communications that contain strategic planning information
(e.g., web pages, electronic mail) may adversely affect operations or public confidence in the
agency, but the damage to the mission would usually be limited. Public confidence consequences
will be more serious for agencies that have national defense, intelligence, or information security
missions. In such cases, the impact may be at least moderate.
Recommended Integrity Impact Level: The provisional integrity impact level recommended for
strategic planning information is low.
mission, not on the time required to re-establish access to the strategic planning information.
Strategic planning processes are usually tolerant of delays.
Recommended Availability Impact Level: The provisional availability impact level recommended for
strategic planning information is low.