Intended to minimize security risks and ensure the confidentiality, integrity, and availability of the sensitive but unclassified information of a federal agency (Organization A) as well as the information that is owned by an external organization (Organization B) that has a network interconnection1 with Organization A.