FIPS Publication 199 defines three levels of potential impact on organizations or individuals should there be a breach of security (i.e., a loss of confidentiality, integrity, or availability). The application of these definitions must take place within the context of each organization and the overall national interest. Can conflicts of interest arise between the organization and the national interest? How do those conflicts affect the categorization process meant in FIPS 199.