The CNSS Model

Commission on National Security Systems (CNSS Model)

THE CNSS MODEL

Commission on National Security Systems

CNSS Model

A framework used by the US government to classify and protect information systems and data based on their sensitivity and importance to national security. It provides a standard set of levels for classifying information and outlines the security requirements needed to protect it.

Confidentiality, Integrity, Availability

Key Components of the CNSS model

Confidentiality

Ensuring that information is only accessible to authorized individuals.

Integrity

Protecting information from authorized modification or destruction.

Availability

Ensuring information is available when needed.

CIA Triangle

CNSS Security Classifications

• Top Secret

• Secret

• Confidential

• Sensitive But Unclassified

• Unclassified

Top Secret

Information that could cause exponential damage to national security.

Examples of Top Secret

• Armed hostilities against the United States or its allies

• Disruption of foreign relations vitally affects the national security

• The compromise of vital national defense plans or complex cryptologic and communications intelligence systems

• The revelation of sensitive intelligence operations

• The disclosure of scientific or technological developments vital to the national security.

Secret

Information that could cause serious damage to national security.

Confidential

Information that could cause significant damage to national

security.

Examples of Top Secret

• For Official Use Only (FOUO)

• Law Enforcement Sensitive

• Internal Revenue Service Materials

FOUO

For Official Use Only

Sensitive But Unclassified

Information that is NOT classified but requires protection.

Unclassified

Information that is NOT classified and does not require protection.

The McCucumber Cube

Security Goals based on McCucumber Cube

• Confidentiality

• Integrity

• Availability

Countermeasures based on McCucumber Cube

• Technology

• Policies & Practice

• People

Information States based on McCucumber Cube

• Transmission

• Storage

• Processing