Guide for Mapping Types of Information and Information Systems to Security Categories, Volume 2: Appendices
Section 4.2.3 and 4.4.2. > C.2 Rationale and Factors for Services Delivery Support Information > C.2.5 Revenue Collection > C.2.5.1 Debt Collection Information Type

C.2.5.1 Debt Collection Information Type

Debt Collection supports activities associated with the collection of money owed to the United
States government from both foreign and domestic sources. The recommended security
categorization for debt collection information is as follows:
Security Category = {(confidentiality, Moderate), (integrity, Low), (availability, Low)}
The confidentiality impact level is the effect of unauthorized disclosure of debt collection
information on the ability of responsible agencies to properly and efficiently collect money owed
to the United States government from both foreign and domestic sources. The consequences of
unauthorized disclosure of debt collection information are generally dependent on the identity of
the debtor and of the nature and value of the debt being collected. Typically, unauthorized
disclosure of debt collection information will have only a limited adverse effect on agency
operations, assets, or individuals.
Special Factors Affecting Confidentiality Impact Determination: Where more sensitive information is
involved, it will commonly be personal information subject to the Privacy Act of 1974,
information that is proprietary to a corporation or other organization, or information that is
politically sensitive by a foreign government. The Privacy Act Information provisional impact
levels are documented in the Personal Identity and Authentication information type. Such
information will often be associated with debt collection processes. Where the amount of the
debt is significant, and unauthorized knowledge might imperil successful collection, then the
associated confidentiality impact assigned to debt collection information might be moderate (or
even high in the case of extremely high dollar value cases).
Recommended Confidentiality Impact Level: The provisional confidentiality impact level
recommended for debt collection information is moderate.
not on the time required to detect the modification or destruction of information. Therefore, the
consequences of unauthorized modification or destruction of debt collection information depend
on the type of property being managed and on the immediacy with which the information is
expected to be used.
Special Factors Affecting Integrity Impact Determination: If the modified or destroyed information is
substantive financial data, there is a greater potential for harm to result from actions being taken
based on incomplete or false information. This can have serious adverse effects on individual
financial actions with consequent loss of revenue from, or other unanticipated consequences
regarding the personal property under disposition. The severity of the consequences depends on
the type of the debt and of the debtor but would be most likely be moderate.
Recommended Integrity Impact Level: The provisional integrity impact level recommended for debt
collection information is low.
mission, not on the time required to re-establish access to the debt collection information.
Most Federal debt collection processes are tolerant of delays. Also, the consequences of
temporary inability to access information concerning foreign or domestic debt will be minimal.
Recommended Availability Impact Level: The provisional availability impact level recommended for
debt collection information is low.