During categorization, an agency cannot find a matching information type in NIST SP 800-60 Volume II for a new emerging technology platform. What should the agency do?
-
A
Default the system to High impact across all objectives
-
B
Use the closest analogous information type and document the rationale
-
C
Skip categorization until NIST updates SP 800-60
-
D
Assign Low impact since no predefined type exists