home/dictionary/Assurance

Assurance

nouncandidate·updated May 9, 2026

Grounds for confidence that the other four security goals (integrity, availability, confidentiality, and accountability) have been adequately met by a specific implementation. “Adequately met” includes (1) functionality that performs correctly, (2) sufficient protection against unintentional errors (by users or software), and (3) sufficient resistance to intentional penetration or by-pass.

Framework senses

NISTIR 7298: Glossary of Key Information Security Terms, Revision 24 sensesview framework →
§1
Grounds for confidence that the other four security goals (integrity, availability, confidentiality, and accountability) have been adequately met by a specific implementation. “Adequately met” includes (1) functionality that performs correctly, (2) sufficient protection against unintentional errors (by users or software), and (3) sufficient resistance to intentional penetration or by-pass.
§2 · sense_2_pending_review
The grounds for confidence that the set of intended security controls in an information system are effective in their application.
§3 · sense_3_pending_review
Measure of confidence that the security features, practices, procedures, and architecture of an information system accurately mediates and enforces the security policy.
§4 · sense_4_pending_review
In the context of OMB M-04-04 and this document, assurance is defined as 1) the degree of confidence in the vetting process used to establish the identity of an individual to whom the credential was issued, and 2) the degree of confidence that the individual who uses the credential is the individual to whom the credential was issued.
CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →
§1
Measure of confidence that the security features, practices, procedures, and architecture of an information system accurately mediates and enforces the security policy.
NIST SP 800-53A1 senseview framework →
§1
The grounds for confidence that the set of intended security controls in an information system are effective in their application.
NIST SP 800-371 senseview framework →
§1
The grounds for confidence that the set of intended security controls in an information system are effective in their application.
NIST SP 800-631 senseview framework →
§1
In the context of OMB M-04-04 and this document, assurance is defined as 1) the degree of confidence in the vetting process used to establish the identity of an individual to whom the credential was issued, and 2) the degree of confidence that the individual who uses the credential is the individual to whom the credential was issued.
NIST SP 800-391 senseview framework →
§1
Measure of confidence that the security features, practices, procedures, and architecture of an information system accurately mediates and enforces the security policy.
NIST SP 800-271 senseview framework →
§1
Grounds for confidence that the other four security goals (integrity, availability, confidentiality, and accountability) have been adequately met by a specific implementation. “Adequately met” includes (1) functionality that performs correctly, (2) sufficient protection against unintentional errors (by users or software), and (3) sufficient resistance to intentional penetration or by-pass.