NIST Special Publication 800-60: Volume 1 Guide for Mapping Types of Information and Information Systems to Security Categories

Title III of the E-Government Act, titled the Federal Information Security Management Act, tasked the National Institute of Standards and Technology to develop standards to be used by all Federal agencies to categorize all information and information systems collected or maintained by or on behalf of each agency based on the objectives of providing appropriate levels of information security according to a range of risk levels; guidelines recommending the types of information and information systems to be included in each category; and minimum information security requirements.