Insert excerpt

Excerpt
This task will work on service categories in support of SWIM-SERV-100 Service categories. It will reflect the more flexible approach that will be adopted.

Table of Contents

Published service category schemes

Mature and can be published

1

Service Category	Value	Definition
CodeInformationSecurityCategoryType		Categorisation of information and information systems based on the information security impact on safety risk analysis. Information service providers and consumers apply the performance-based information security requirements based on the category.
	NONE	None.
	BASIC	Information security categories shall be reviewed every (2) years based on the latest risk analysis.
	INTERMEDIATE	Information security categories shall be reviewed annually based on the latest risk analysis.
	ADVANCED	Information security categories shall be reviewed monthly based on the latest risk analysis.

Potential service category

Notes

1

lifecycle stage

Service Category	Value	Definition	URL
CodeLifeCycleStageType
	DRAFT	The status indicating that the service is...
	EXPERIMENTAL	The status indicating that the service uses new ideas or methods, and might be modified later if it is unsuccessful. It is made available in order to be assessed for future development.	http://reference.swim.aero/information-services/service-categories/CodeLifeCycleStageType#EXPERIMENTAL

2

Information security category

This comes from the final version of the Information Service Overview fields - see Information Service Overviews Handbook v1.1.

Service Category	Value	Definition
Information security category	Categorisation of information and information systems based on the information security impact on safety risk analysis. Information service providers and consumers apply the performance-based information security requirements based on the category.	NONE	None.	BASIC	Information security categories shall be reviewed every (2) years based on the latest risk analysis.	INTERMEDIATE	Information security categories shall be reviewed annually based on the latest risk analysis.	ADVANCED	Information security categories shall be reviewed monthly based on the latest risk analysis.