How to Categorize MAC Levels

Document information MAC categories once the significance of the information is understood.

Classify information into Mission Assurance Categories or MAC levels when formulating information assurance policies that meet business or military requirements. MAC levels convey business or military information operational significance from the availability and integrity standpoint so that personnel understand how important each information piece is to organizational objectives. Use MAC levels to convey the military or business operational importance of information to organization personnel.

Instructions

1. Assign information crucial to business or military operations to the "MAC I" category. Information classified as "MAC I" must always be available with uncompromised integrity. Business or mission objectives cannot be accomplished if MAC I information integrity or availability is compromised.

2. Categorize information important to business or military mission goals as "MAC II." Information in the MAC II category must have high integrity and availability. The ability to meet business or mission objectives can be seriously hampered if MAC II categorized information is unavailable or cannot be trusted.

3. Assign the "MAC III" category to information required for every day business or military operations. MAC III information is considered necessary but compromise of availability or integrity does not immediately jeopardize business or military objectives.

Tips & Warnings

• Keep in mind that information confidentiality levels such as Classified, Sensitive and Public and MAC levels are mutually exclusive information classifications.

References

• CygnaCom Solutions: Certification and Accreditation: DIACAP
• Defense Acquisition Guidebook: Information Assurance Controls