Requirement 0059 (Part Three: Information, section 9.2 Classifications and Caveats; applies to All entities; dated 31 October 2024; retained from Release 2025): The value, importance or sensitivity of official information (intended for use as an official record) is assessed by the originator by considering the potential damage to the government, the national interest, organisations or individuals that would arise if the information's confidentiality were compromised. Business impact levels run from 1 (low, OFFICIAL) through 2 (OFFICIAL: Sensitive), 3 (high, PROTECTED), 4 (extreme, SECRET) to 5 (catastrophic, TOP SECRET); OFFICIAL and UNOFFICIAL are not security classifications.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.