Guide for Mapping Types of Information and Information Systems to Security Categories, Volume 2: Appendices
APPENDIX D: IMPACT DETERMINATION FOR MISSION-BASED > D.3

D.3 Intelligence Operations Intelligence operations involve the development and management of accurate, comprehensive, and timely foreign intelligence on national security topics. Information systems, the function, operation, or use of, which involve intelligence activities or are critical to the direct fulfillment of intelligence missions32 are defined under Public Law33 as national security systems. National security information and national security systems are outside the scope of this guideline. Security objectives and impact levels associated with national security systems are determined by the head of each agency exercising control of the system34. Intelligence operations are subdivided into the following sub-elements: • Intelligence Planning Information Type - Intelligence Planning involves developing strategies focused on intelligence requirements, prioritizing these requirements, and managing these requirements (adding, deleting and modifying). • Intelligence Collection Information Type - Intelligence Collection involves acquiring raw data and provisioning the data to processing elements. • Intelligence Analysis and Production Information Type - Intelligence Analysis and Production consists of integrating, evaluating, and/or interpreting information from single or multiple sources into intelligence satisfying consumer needs and preparing intelligence products in support of known or anticipated consumers. • Intelligence Dissemination Information Type - Intelligence Dissemination consists of delivering the intelligence products to consumers. • Intelligence Processing Information Type - Intelligence processing involves converting collected raw data into forms suitable for analysis. Some agencies are charged with gathering domestic intelligence. Much domestic intelligence information is classified. Other domestic intelligence information may not be classified (e.g., some information obtained from state and local government sources). All classified information is treated under separate rules established for national security information. The recommended categorization for unclassified domestic intelligence information follows: Security Category = {(confidentiality, High), (integrity, High), (availability, High)} 32 Systems that do not involve a) intelligence activities, b) cryptologic activities related to national security, c) command and control of military forces, d) equipment that is an integral part of a weapon or weapons system or 5) information classified by an act of Congress or under an Executive order are not designated as national security systems if they are used exclusively for routine business or administrative applications even if they are critical to the direct fulfillment of military or intelligence missions. Routine business or administrative applications are defined as including payroll, finance, logistics, and personnel management applications. [Federal Information Security Management Act of 2002, Public Law 107-347, Subchapter III - Information Security, Sec. 3547 - National security systems, 12/17/02] 33 Clinger-Cohen Act, Public Law 104-106, National Defense Authorization Act For Fiscal Year 1996, Division E - Information Technology Reform, Sec. 5142 - National Security Systems Defined, 8/8/96; Homeland Security Act of 2002, Public Law 107-296, Title X - Information Security, Subchapter II, Sec. 3532 - Definitions, 11/25/02; and Federal Information Security Management Act of 2002, Public Law 107-347, Subchapter III - Information Security, Sec. 3542 - Definitions, 12/17/02. 34 Federal Information Security Management Act of 2002, Public Law 107-347, Subchapter III - Information Security, Sec. 3547 - National security systems, 12/17/02. The confidentiality impact level is the effect of unauthorized disclosure of domestic intelligence information on the ability of responsible agencies to develop and manage accurate, comprehensive, and timely domestic intelligence on homeland security topics and other national threats. The consequences of unauthorized disclosure of domestic intelligence information may include loss of the ability and/or authorization to collect information necessary to provide warning or to interdict from major threats (e.g., terrorist threats to critical infrastructures and/or key national assets). Recommended Confidentiality Impact Level: Given the criticality of much domestic intelligence information and the severe or catastrophic consequences to agencies that disclose domestic intelligence information without proper authorization (e.g., Privacy Act provisions, Fourth Amendment issues), the provisional confidentiality impact level recommended for the domestic intelligence information is high. not on the time required to detect the modification or destruction of information. Domestic intelligence information is generally associated with other mission-related information (e.g., anti- terrorism, firearms and explosive protection, narcotics interdiction). The consequences of unauthorized modification or destruction of domestic intelligence information is determined to a large extent on the missions being supported by the intelligence information and on whether the intelligence information is time-critical. Unauthorized modification or destruction of intelligence information may adversely affect mission operations in a manner that results in unacceptable damage to critical infrastructures, damage to or loss of key national assets, or loss of human life. Recommended Integrity Impact Level: The provisional integrity impact level recommended for domestic intelligence information is high. mission, not on the time required to re-establish access to domestic intelligence information. Generally, missions supported by domestic intelligence information are not reliably tolerant of delays. Significant degradation in mission capability and resultant catastrophic consequences for critical infrastructures, key national assets, and/or human life may result from disruption of access to domestic intelligence information. Recommended Availability Impact Level: The provisional availability impact level recommended for domestic intelligence information is high.