FIPS 199
E1008664
FIPS 199 is a U.S. federal standard that defines security categorization levels (low, moderate, high) for information and information systems based on the potential impact of security breaches.
All labels observed (2)
| Label | Occurrences |
|---|---|
| FIPS 199 canonical | 1 |
| FIPS 199 security categorization | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T12915745 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: FIPS 199 Context triple: [Federal Risk and Authorization Management Program, basedOnStandard, FIPS 199]
-
A.
FIPS 200
FIPS 200 is a U.S. federal standard that establishes minimum security requirements for federal information and information systems, forming a core part of the government’s information security framework.
-
B.
FIPS 201
FIPS 201 is a U.S. federal standard that defines the requirements and architecture for secure, interoperable personal identity verification (PIV) credentials for federal employees and contractors.
-
C.
FIPS 140
FIPS 140 is a U.S. government standard that specifies security requirements for cryptographic modules used to protect sensitive information in computer and telecommunications systems.
-
D.
NIST SP 800-171
NIST SP 800-171 is a U.S. National Institute of Standards and Technology publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal information systems and organizations.
-
E.
Federal Information Processing Standards
Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: FIPS 199 Target entity description: FIPS 199 is a U.S. federal standard that defines security categorization levels (low, moderate, high) for information and information systems based on the potential impact of security breaches.
-
A.
FIPS 200
FIPS 200 is a U.S. federal standard that establishes minimum security requirements for federal information and information systems, forming a core part of the government’s information security framework.
-
B.
FIPS 201
FIPS 201 is a U.S. federal standard that defines the requirements and architecture for secure, interoperable personal identity verification (PIV) credentials for federal employees and contractors.
-
C.
FIPS 140
FIPS 140 is a U.S. government standard that specifies security requirements for cryptographic modules used to protect sensitive information in computer and telecommunications systems.
-
D.
NIST SP 800-171
NIST SP 800-171 is a U.S. National Institute of Standards and Technology publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal information systems and organizations.
-
E.
Federal Information Processing Standards
Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
- F. None of above. chosen
Statements (46)
| Predicate | Object |
|---|---|
| instanceOf |
NIST Federal Information Processing Standard
ⓘ
U.S. federal information security standard ⓘ |
| appliesTo | all federal information systems except national security systems ⓘ |
| audience |
federal information system owners
ⓘ
information security officers ⓘ risk managers ⓘ |
| basisFor |
security categorization of information
ⓘ
security categorization of information systems ⓘ |
| classificationModel | low-moderate-high impact model ⓘ |
| country |
United States of America
ⓘ
surface form:
United States
|
| defines |
high impact level
ⓘ
low impact level ⓘ moderate impact level ⓘ security categorization standards ⓘ security impact levels ⓘ |
| documentType | technical standard ⓘ |
| foundationFor | federal security control selection ⓘ |
| fullName | Federal Information Processing Standards Publication 199 NERFINISHED ⓘ |
| impactAssessmentCriterion |
potential impact on individuals
ⓘ
potential impact on organizational assets ⓘ potential impact on organizational operations ⓘ potential impact on other organizations ⓘ potential impact on the Nation ⓘ |
| impactDimension |
availability
ⓘ
confidentiality ⓘ integrity ⓘ |
| issuedBy |
National Institute of Standards and Technology
NERFINISHED
ⓘ
U.S. Department of Commerce NERFINISHED ⓘ |
| language | English ⓘ |
| publisher | NIST Computer Security Division NERFINISHED ⓘ |
| regulatoryContext | Federal Information Security Modernization Act NERFINISHED ⓘ |
| relatedTo |
FIPS 200
NERFINISHED
ⓘ
NIST Special Publication 800-53 NERFINISHED ⓘ |
| scope |
federal information
ⓘ
federal information systems ⓘ |
| securityObjective |
protect availability
ⓘ
protect confidentiality ⓘ protect integrity ⓘ |
| status | active ⓘ |
| supports | risk management for federal information systems ⓘ |
| title | Standards for Security Categorization of Federal Information and Information Systems NERFINISHED ⓘ |
| usedBy | U.S. federal agencies NERFINISHED ⓘ |
| usedFor |
classifying information systems
ⓘ
determining security control baselines ⓘ |
| usedIn |
federal information security programs
ⓘ
system authorization processes ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: FIPS 199 Description of subject: FIPS 199 is a U.S. federal standard that defines security categorization levels (low, moderate, high) for information and information systems based on the potential impact of security breaches.
Referenced by (2)
Full triples — surface form annotated when it differs from this entity's canonical label.
this entity surface form:
FIPS 199 security categorization