top of page

This decision point is where we anticipate making the determination if any of the data/information under review should be considered data/information that when viewed in aggregation rises to a level above Level 4.  In other words, can the data/information be considered data/information that when some or all is considered in aggregate creates the conditions for holding the data/information at a higher level?

 

For Reference: NIST describes aggregation, also commonly referred to as compilation, in Section 4.4.2.1 of NIST 800-60

Puck 7.png

© 2019 by SRBeckJr.

bottom of page