Which of the following is an area for adjusting system categorization?

• A. Overall information system impact
• B. Increasing User Population
• C. Data Center Floor Space
• D. Software License Count

Answer: (A)

The area for adjusting system categorization is the overall information system impact. This is because security categorization uses the potential impact on operations, assets, and individuals, reflected through the combined impact across confidentiality, integrity, and availability. The overall impact level is determined by the most severe consequence in those areas, guiding how the system is categorized.

Things like increasing the user population affect workload and exposure but do not by themselves change the security category. Data center floor space relates to physical housing and capacity, not security impact. Software license count pertains to procurement and capacity, not the system’s security impact.