Guide for Mapping Types of Information and Information Systems to Security Categories, Volume 2: Appendices
Section 4.2.3 and 4.4.2. > C.2 Rationale and Factors for Services Delivery Support Information > C.2.8 General Government > C.2.8.9 Personal Identity and Authentication Information Information Type

C.2.8.9 Personal Identity and Authentication Information Information Type

Personal identity and authentication information includes that information necessary to ensure
that all persons who are potentially entitled to receive any federal benefit are enumerated and
identified so that Federal agencies can have reasonable assurance that they are paying or
communicating with the right individuals. This information include individual citizen's Social
Security Numbers, names, dates of birth, places of birth, parents' names, etc.18 The
recommended security categorization for the personal identity and authentication information
type is as follows:
Security Category = {(confidentiality, Moderate), (integrity, Moderate), (availability, Moderate)}
The confidentiality impact level is based on the effects of unauthorized disclosure of personal
identity and authentication information on the ability of Federal agencies to determine that
communications with and payments to individuals are being made with or to the correct
individuals - and to protect individuals against identity theft and the Federal government against
fraud. Unauthorized disclosure of raw data and other source information for identity
authentication operations is likely to violate the Privacy Act of 1974 and other regulations
applicable to the dissemination of personal and government information. There are many cases
in which unauthorized disclosure of personal identity and authentication information will have
only a limited adverse effect on government operations, assets, or individuals. However, the
potential for use of such information by criminals to perpetrate identity theft and related fraud
can do serious harm to individuals. Unauthorized disclosure of centrally managed personal
identity and authentication information, such as passport and visa control databases can have a
serious adverse effect on agency missions.
Special Factors Affecting Confidentiality Impact Determination: For agencies that manage large
income information involving records of the general public, the provisional confidentiality
impact level can be expected to be at least moderate. Where personal identity and authentication
information is used in controlling access to facilities (e.g., Federal facilities, critical
infrastructure facilities, key national assets) or for border control purposes, the consequences of
unauthorized disclosure that permits credentials forgery can justify a high impact assignment.
Recommended Confidentiality Impact Level: The provisional confidentiality impact level
recommended for personal identity and authentication information is moderate.
The integrity impact level is based on the specific purpose to which personal identity and
authentication information is put; and not on the time required to detect the modification or
destruction of information. In the case of very large databases containing personal identity and
authentication information relating to the general public, there is a significant probability that
erroneous actions will be taken affecting benefits entitlements of or access to facilities by large
numbers of individuals. In the case of benefits, this can result in at least short-term financial
18 Persons conducting sensitive or payment related business with the government must identify themselves to the
level prescribed by appropriate governing directives using such data.
hardship for citizens. It can also be expected to result in very serious disruption of the agency
operations due to large time and resource requirements for taking corrective actions.
Special Factors Affecting Integrity Impact Determination: In the case of smaller organizations, and
where the information affected is limited to employees, there will still be an impact, but the
consequences may justify only a low provisional impact rating. Where a data modification
permits access to facilities (or ingress into the United States) by individuals to whom access
should be prohibited, the integrity impact could be high.
Recommended Integrity Impact Level: The provisional integrity impact level recommended for
personal identity and authentication information is moderate.
The availability impact level is based on the specific purpose to which personal identity and
authentication information is put; and not on the time required to re-establish access to the
personal identity and authentication information. Benefits determination processes are generally
tolerant of reasonable delays. In many cases, disruption of access to personal identity and
authentication information can be expected to have only a limited adverse effect on agency
operations, agency assets, or individuals.
Special Factors Affecting Availability Impact Determination: In the case of very large data bases
containing personal identity and authentication information relating to the general public, there is
a significant probability that processing delays will affect the benefits entitlements of or access to
facilities by large numbers of individuals. The larger the number of records affected, the longer
the delays that can be expected to result. This can result in financial hardship for citizens and in
serious disruption of the agency operations due to large time and resource requirements for
backlog processing. In such cases, the availability impact level would be at least moderate. In
the case of permanent loss of records or access to facilities by emergency personnel, the impact
might even be high.
Recommended Availability Impact Level: The provisional availability impact level recommended for
personal identity and authentication information is moderate.