Which statement best defines Classified Information Systems (CIS)?

• A. Classified systems are IS that contains and/or process classified information.
• B. CIS are unclassified networks.
• C. CIS refers to any system stored on physical media.
• D. CIS is any system used for public information.

Answer: (A)

Classified Information Systems are information systems that contain and/or process information that has a security classification. The best definition points to the system handling information that is designated as classified, which brings with it specific safeguards, access controls, and handling procedures to prevent unauthorized disclosure. This focus on protected data differentiates CIS from other types of systems.

Unclassified networks don’t meet the requirement of handling classified data, so they aren’t CIS. A system stored on physical media could be either classified or unclassified, so storage alone doesn’t define a CIS. And a system used for public information is intended for unclassified, openly accessible data, which again wouldn’t be classified.