Which SP 800 document defines PII and impact levels and provides for confidentiality considerations of USG systems and breach response requirements?

• A. Guide to Protecting the Confidentiality of PII
• B. Guideline for Media Santitization
• C. Guide to Computer Security log Management
• D. Information Security Handbook - A guide for managers

Answer: (A)

This item tests knowledge of which NIST SP 800 document defines what PII is, how impact levels are used to gauge the sensitivity of PII, and the confidentiality considerations and breach response expectations for USG systems. The correct document is the Guide to Protecting the Confidentiality of Personally Identifiable Information. It provides a precise definition of PII, explains how to classify PII by impact levels, and outlines the confidentiality protections and incident/breach response considerations needed when handling PII in federal environments. The other documents focus on different topics—sanitizing media, managing security logs, or offering a broad managerial security handbook—and do not specifically define PII or prescribe breach response requirements.