C.3.1 - Administrative management
Administrative Management involves the day-to-day management and maintenance of the internal infrastructure. Administrative information is usually routine and is relatively low impact. However, some administrative management information is either very sensitive (e.g., logistics management for nuclear or other hazardous materials, security management information, and security clearance management information) or critical (e.g., inventory control and logistics management information needed to support time-critical operations). National security information is outside the scope of this guideline. [See Appendix A, Glossary of Terms, for a definition of national security information/systems.] Routine administrative management information systems that do not process classified information are not usually designated national security systems, even if they are critical to the direct fulfillment of military or intelligence missions.
Information types
Code | Name | Impact levels | ||
---|---|---|---|---|
Confidentiality | Integrity | Availability | ||
C.3.1.1 | Facilities, fleet, and equipment management | Low | Low | Low |
C.3.1.2 | Help desk services | Low | Low | Low |
C.3.1.3 | Security management | Moderate | Moderate | Low |
C.3.1.4 | Travel | Low | Low | Low |
C.3.1.5 | Workplace policy development and management | Low | Low | Low |