C.3.1 - Administrative management

Administrative Management involves the day-to-day management and maintenance of the internal infrastructure. Administrative information is usually routine and is relatively low impact. However, some administrative management information is either very sensitive (e.g., logistics management for nuclear or other hazardous materials, security management information, and security clearance management information) or critical (e.g., inventory control and logistics management information needed to support time-critical operations). National security information is outside the scope of this guideline. [See Appendix A, Glossary of Terms, for a definition of national security information/systems.] Routine administrative management information systems that do not process classified information are not usually designated national security systems, even if they are critical to the direct fulfillment of military or intelligence missions.

Information types

Code Name Impact levels
Confidentiality Integrity Availability
C.3.1.1 Facilities, fleet, and equipment management Low Low Low
C.3.1.2 Help desk services Low Low Low
C.3.1.3 Security management Moderate Moderate Low
C.3.1.4 Travel Low Low Low
C.3.1.5 Workplace policy development and management Low Low Low