Sensitivity

An information technology environment consists of the system, data, and applications, which must be examined individually and in total. All systems and applications require some level of protection for confidentiality, integrity, and availability. This level of protection is determined by an evaluation of the sensitivity and criticality of the information processed, the relationship of the system to the organization’s mission, and the economic value of the system components. In regard to biometric devices, the level at which the device is configured for scanning.