Dictionary · NIST SP 800-171r3
NIST Special Publication 800 NIST SP 800-171r3 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Nouns
506 senses- Agency
- glossary
Any executive agency or department, military department, Federal Government corporation, Federal Governmentcontrolled corporation, or other establishment in the Executive Branch of the Federal Government, or any independent regulatory agency. [13]
- assessment
- glossary
See security control assessment .
- Authenticator
- glossary
Something the claimant possesses and controls (typically a cryptographic module or password) that is used to authenticate the claimant's identity. This was previously referred to as a token.
- Confidentiality
- glossary
Preserving authorized restrictions on information access and disclosure, including means for protecting personal privacy and proprietary information. [79]
- facility
- glossary
One or more physical locations containing systems or system components that process, store, or transmit information.
- Firmware
- glossary
Computer programs and data stored in hardware - typically in read-only memory (ROM) or programmable readonly memory (PROM) - such that the programs and data cannot be dynamically written or modified during execution of the programs. See hardware and software . [78]
- information
- glossary
Any communication or representation of knowledge such as facts, data, or opinions in any medium or form, including textual, numerical, graphic, cartographic, narrative, electronic, or audiovisual forms. [13]
- Integrity
- glossary
Guarding against improper information modification or destruction and includes ensuring information nonrepudiation and authenticity. [79]
- Media
- glossary
Physical devices or writing surfaces including, but not limited to, magnetic tapes, optical disks, magnetic disks, Large-Scale Integration (LSI) memory chips, and printouts (but not including display media) onto which information is recorded, stored, or printed within a system. [7]
- network
- glossary
A system implemented with a collection of interconnected components. Such components may include routers, hubs, cabling, telecommunications controllers, key distribution centers, and technical control devices.
- Organization
- glossary
An entity of any size, complexity, or positioning within an organizational structure. [7, adapted]
- Noun #101177
- glossary
A specification of security or privacy controls, control enhancements, supplemental guidance, and other supporting information employed during the tailoring process, that is intended to complement (and further refine) security control baselines. The overlay specification may be more stringent or less stringent than the original security control baseline specification and can be applied to multiple information systems. [13]
- Noun #3775
- glossary
The recordings (automated and/or manual) of evidence of activities performed or results achieved (e.g., forms, reports, test results) that serve as a basis for verifying that the organization and the system are performing as intended. Also used to refer to units of related data fields (i.e., groups of data fields that can be accessed by a program and that contain a complete set of information on particular items).
- risk
- glossary
A measure of the extent to which an entity is threatened by a potential circumstance or event, and typically is a function of: (i) the adverse impact, or magnitude of harm, that would arise if the circumstance or event occurs; and (ii) the likelihood of occurrence. [13]
- Sanitization
- glossary
Actions taken to render data written on media unrecoverable by ordinary and - for some forms of sanitization extraordinary means. A process to remove information from media such that data recovery is not possible, including the removal of all classified labels, markings, and activity logs.
- Security
- glossary
A condition that results from the establishment and maintenance of protective measures that enable an organization to perform its mission or critical functions despite risks posed by threats to its use of systems. Protective measures may involve a combination of deterrence, avoidance, prevention, detection, recovery, and correction that should form part of the organization's risk management approach. [78]
- system
- glossary
See information system .
- threat
- glossary
Any circumstance or event with the potential to adversely impact organizational operations, organizational assets, individuals, other organizations, or the Nation through a system via unauthorized access, destruction, disclosure, modification of information, and/or denial of service. [55]
- hardware
- glossary
The material physical components of a system. See software and firmware . [78]
- Identifier
- glossary
Unique data used to represent a person's identity and associated attributes. A name or a card number are examples of identifiers. A unique label used by a system to indicate a specific entity, object, or group.
- Availability
- glossary
Ensuring timely and reliable access to and use of information. [79]
- Assessor
- glossary
See security control assessor .
- Authentication
- glossary
Verifying the identity of a user, process, or device, often as a prerequisite to allowing access to resources in a system. [7, adapted].
- Impact
- glossary
With respect to security, the effect on organizational operations, organizational assets, individuals, other organizations, or the Nation (including the national security interests of the United States) of a loss of confidentiality, integrity, or availability of information or a system. With respect to privacy, the adverse effects that individuals could experience when an information system processes their PII.
- incident
- glossary
An occurrence that actually or imminently jeopardizes, without lawful authority, the confidentiality, integrity, or availability of information or an information system; or constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies. [79]
- Advanced persistent threat
- glossary
An adversary that possesses sophisticated levels of expertise and significant resources which allow it to create opportunities to achieve its objectives by using multiple attack vectors including, for example, cyber, physical, and deception. These objectives typically include establishing and extending footholds within the IT infrastructure of the targeted organizations for purposes of exfiltrating information, undermining or impeding critical aspects of a mission, program, or organization; or positioning itself to carry out these objectives in the future. The advanced persistent threat pursues its objectives repeatedly over an extended period; adapts to defenders' efforts to resist it; and is determined to maintain the level of interaction needed to execute its objectives. [60]
- audit log
- glossary
A chronological record of system activities, including records of system accesses and operations performed in a given period.
- audit record
- glossary
An individual entry in an audit log related to an audited event.
- baseline configuration
- glossary
A documented set of specifications for a system or a configuration item within a system that has been formally reviewed and agreed upon at a given point in time, and that can only be changed through change control procedures.
- Common Vulnerabilities and Exposures
- acronym list
CVE: Common Vulnerabilities and Exposures
- Common Vulnerability Scoring System
- acronym list
CVSS: Common Vulnerabilit y Scoring System
- Configuration management
- glossary
A collection of activities focused on establishing and maintaining the integrity of information technology products and systems through the control of processes for initializing, changing, and monitoring the configurations of those products and systems throughout the system development life cycle.
- Controlled Area
- glossary
Any area or space for which the organization has confidence that the physical and procedural protections provided are sufficient to meet the requirements established for protecting the information or system.
- Controlled Unclassified Information
- glossary
Information that law, regulation, or governmentwide policy requires to have safeguarding or disseminating controls, excluding information that is classified under Executive Order 13526, Classified National Security Information, December 29, 2009, or any predecessor or successor order, or the Atomic Energy Act of 1954, as amended. [1]
- Demilitarized zone
- acronym list
DMZ: Demilitarized Zone
- Executive Agency
- glossary
An executive department specified in 5 U.S.C. Sec. 101; a military department specified in 5 U.S.C. Sec. 102; an independent establishment as defined in 5 U.S.C. Sec. 104(1); and a wholly owned Government corporation fully subject to the provisions of 31 U.S.C. Chapter 91.
- Extensible Authentication Protocol
- acronym list
EAP: Extensible Authentication Protocol
- External Network
- glossary
A network not controlled by the organization.
- external service provider
- glossary
See external system service provider .
- Federal Information Processing Standard
- acronym list
FIPS: Federal Information Processing Standards
- Federal Information System
- glossary
An information system used or operated by an executive agency, by a contractor of an executive agency, or by another organization on behalf of an executive agency. [80]
- File Transfer Protocol
- acronym list
FTP: File Transfer Protocol
- FIPS-Validated Cryptography
- glossary
A cryptographic module validated by the Cryptographic Module Validation Program (CMVP) to meet the requirements specified in FIPS Publication 1403 (as amended). As a prerequisite to CMVP validation, the cryptographic module is required to employ a cryptographic algorithm implementation that has successfully passed validation testing by the Cryptographic Algorithm Validation Program (CAVP). See NSA-approved cryptography .
- Impact Value
- glossary
The assessed worst-case potential impact that could result from a compromise of the confidentiality, integrity, or availability of information expressed as a value of low, moderate, or high. [6]
- Information Flow Control
- glossary
Procedure to ensure that information transfers within a system do not violate the security policy.
- Information Resources
- glossary
Information and related resources, such as personnel, equipment, funds, and information technology. [81]
- Information Security
- glossary
The protection of information and systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integrity, and availability. [79]
- Information System
- glossary
A discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information. [81]
- information technology
- glossary
Any services, equipment, or interconnected system(s) or subsystem(s) of equipment, that are used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data or information by the agency. For purposes of this definition, such services or equipment if used by the agency directly or is used by a contractor under a contract with the agency that requires its use; or to a significant extent, its use in the performance of a service or the furnishing of a product. Information technology includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including cloud computing and help-desk services or other professional services which support any point of the life cycle of the equipment or service), and related resources. Information technology does not include any equipment that is acquired by a contractor incidental to a contract which does not require its use. [13]
- Institute of Electrical and Electronics Engineers
- acronym list
IEEE: Institute of Electrical and Electronics Engineers
- Internal Network
- glossary
A network in which the establishment, maintenance, and provisioning of security controls are under the direct control of organizational employees or contractors or in which the cryptographic encapsulation or similar security technology implemented between organization-controlled endpoints provides the same effect (with regard to confidentiality and integrity). An internal network is typically organization-owned yet may be organizationcontrolled while not being organization-owned.
- least privilege
- glossary
The principle that a security architecture is designed so that each entity is granted the minimum system authorizations and resources needed to perform its function.
- Acceptable use policy
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- malicious code
- glossary
Software or firmware intended to perform an unauthorized process that will have an adverse impact on the confidentiality, integrity, or availability of a system. Examples of malicious code include viruses, worms, Trojan horses, spyware, some forms of adware, or other code-based entities that infect a host.
- Media access control
- acronym list
MAC: Media Access Control
- mobile code
- glossary
Software programs or parts of programs obtained from remote systems, transmitted across a network, and executed on a local system without explicit installation or execution by the recipient.
- mobile device
- glossary
A portable computing device that has a small form factor such that it can easily be carried by a single individual; is designed to operate without a physical connection (e.g., wirelessly transmit or receive information); possesses local, non-removable, or removable data storage; and includes a self-contained power source. Mobile devices may also include voice communication capabilities, on-board sensors that allow the devices to capture information, or built-in features that synchronize local data with remote locations. Examples include smartphones, tablets, and ereaders.
- Personally Identifiable Information
- acronym list
PII: Personally Identifiable Information
- Multi-factor authentication
- glossary
Authentication using two or more different factors to achieve authentication. Factors include something you know (e.g., PIN, password), something you have (e.g., cryptographic identification device, token), or something you are (e.g., biometric). See authenticator .
- National Vulnerability Database
- acronym list
NVD: National Vulnerabilit y Database
- Network Access
- glossary
Access to a system by a user (or a process acting on behalf of a user) communicating through a network (e.g., local area network, wide area network, the internet).
- Non-Local Maintenance
- glossary
Maintenance activities conducted by individuals communicating through an external network (e.g., the internet) or an internal network.
- NSA-Approved Cryptography
- glossary
Cryptography that consists of an approved algorithm, an implementation that has been approved for the protection of classified information and/or controlled unclassified information in a specific environment, and a supporting key management infrastructure. [8]
- potential impact
- glossary
The loss of confidentiality, integrity, or availability could be expected to have: (i) a limited adverse effect (FIPS Publication 199 low); (ii) a serious adverse effect (FIPS Publication 199 moderate); or (iii) a severe or catastrophic adverse effect (FIPS Publication 199 high) on organizational operations, organizational assets, or individuals. [6]
- Privileged Account
- glossary
A system account with the authorizations of a privileged user.
- privileged user
- glossary
A user who is authorized (and therefore, trusted) to perform security-relevant functions that ordinary users are not authorized to perform.
- remote access
- glossary
Access to an organizational system by a user (or a process acting on behalf of a user) communicating through an external network (e.g., the internet). Remote access methods include dial-up, broadband, and wireless.
- remote maintenance
- glossary
Maintenance activities conducted by individuals communicating through an external network (e.g., the internet).
- risk assessment
- glossary
The process of identifying risks to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other organizations, and the Nation, resulting from the operation of a system. [55]
- Security Content Automation Protocol
- acronym list
SCAP: Security Content Automation Protocol
- security control
- glossary
The safeguards or countermeasures prescribed for an information system or an organization to protect the confidentiality, integrity, and availability of the system and its information. [13]
- Security Control Assessment
- glossary
The testing or evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization. [13]
- Security Domain
- glossary
A domain that implements a security policy and is administered by a single authority. [78, adapted]
- Security Functions
- glossary
The hardware, software, or firmware of the system responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based.
- security requirement
- glossary
A requirement levied on a system or an organization that is derived from applicable laws, Executive Orders, directives, regulations, policies, standards, procedures, or mission/business needs to ensure the confidentiality, integrity, and availability of information that is being processed, stored, or transmitted. [7, adapted] [8, adapted]
- Supply Chain Risk Management
- acronym list
SCRM: Supply Chain Risk Management
- System Security Plan
- glossary
A document that describes how an organization meets or plans to meet the security requirements for a system. In particular, the system security plan describes the system boundary, the environment in which the system operates, how the security requirements are satisfied, and the relationships with or connections to other systems.
- Transmission Control Protocol/Internet Protocol
- acronym list
TCP/IP: Transmission Control Protocol/Internet Protocol
- Transport Layer Security
- acronym list
TLS: Transport Layer Security
- Coordinated Universal Time
- acronym list
UTC: Coordinated Universal Time
- Federal Agency
- glossary
See executive agency .
- Read-Only Memory
- acronym list
ROM: Read-Only Memory
- Personal Identification Number
- acronym list
PIN: Personal Identification Number
- Code of Federal Regulations
- acronym list
CFR: Code of Federal Regulations
- Cybersecurity and Infrastructure Security Agency
- acronym list
CISA: Cybersecurity and Infrastructure Security Agency
- Federal Information Security Modernization Act
- acronym list
FISMA: Federal Information Security Modernization Act
- Internet of Things
- acronym list
IoT: Internet of Things
- Information Security Oversight Office
- acronym list
ISOO: Information Security Oversight Office
- National Archives and Records Administration
- acronym list
NARA: National Archives and Records Administration
- Organization-Defined Parameter
- glossary
The variable part of a security requirement that is instantiated by an organization during the tailoring process by assigning an organization-defined value as part of the requirement. [8, adapted]
- Operational Technology
- acronym list
OT: Operational Technology
- configuration settings
- glossary
The set of parameters that can be changed in hardware, software, or firmware that affect the security posture and/or functionality of the system.
- CUI Executive Agent
- glossary
The National Archives and Records Administration (NARA), which implements the executive branch-wide CUI Program and oversees federal agency actions to comply with Executive Order 13556. NARA has delegated this authority to the Director of the Information Security Oversight Office (ISOO). [5]
- CUI program
- glossary
The executive branch-wide program to standardize CUI handling by all federal agencies. The program includes the rules, organization, and procedures for CUI, established by Executive Order 13556, 32 CFR Part 2002, and the CUI Registry. [5]
- cyber-physical system
- glossary
Interacting digital, analog, physical, and human components engineered for function through integrated physics and logic.
- external system (or component)
- glossary
A system or component of a system that is outside of the authorization boundary established by the organization and for which the organization typically has no direct control over the application of required security controls or the assessment of security control effectiveness.
- insider threat
- glossary
The threat that an insider will use her/his authorized access, wittingly or unwittingly, to do harm to the security of the United States. This threat can include damage to the United States through espionage, terrorism, unauthorized disclosure, or through the loss or degradation of departmental resources or capabilities.
- nonfederal organization
- glossary
An entity that owns, operates, or maintains a nonfederal system.
- nonfederal system
- glossary
A system that does not meet the criteria for a federal system.
- on behalf of (an agency)
- glossary
A situation that occurs when: (i) a non-executive branch entity uses or operates an information system or maintains or collects information for the purpose of processing, storing, or transmitting Federal information; and (ii) those activities are not incidental to providing a service or product to the government. [5]
- personnel security
- glossary
The discipline of assessing the conduct, integrity, judgment, loyalty, reliability, and stability of individuals for duties and responsibilities requiring trustworthiness. [8]
- security assessment
- glossary
See security control assessment .
- system component
- glossary
A discrete identifiable information technology asset that represents a building block of a system and may include hardware, software, and firmware. [41]
- system service
- glossary
A capability provided by a system that facilitates information processing, storage, or transmission.
- common secure configuration
- glossary
Recognized, standardized, and established benchmarks that stipulate secure configuration settings for specific information technology platforms/products and instructions for configuring those system components to meet operational requirements. These benchmarks are also referred to as security configuration checklists, lockdown and hardening guides, security reference guides, and security technical implementation guides.
- CUI registry
- glossary
The online repository for all information, guidance, policy, and requirements on handling CUI, including everything issued by the CUI Executive Agent other than 32 CFR Part 2002. Among other information, the CUI Registry identifies all approved CUI categories, provides general descriptions for each, identifies the basis for controls, establishes markings, and includes guidance on handling procedures. [5]
- external system service
- glossary
A system service that is implemented outside of the authorization boundary of the organizational system (i.e., a service that is used by but not a part of the organizational system) and for which the organization typically has no direct control over the application of required security controls or the assessment of security control effectiveness.
- external system service provider
- glossary
A provider of external system services to an organization through a variety of consumer-producer relationships, including joint ventures, business partnerships, outsourcing arrangements (i.e., through contracts, interagency agreements, lines of business arrangements), licensing agreements, and/or supply chain exchanges. [8]
- portable storage device
- glossary
A system component that can be inserted into and removed from a system and that is used to store information or data (e.g., text, video, audio, and/or image data). Such components are typically implemented on magnetic, optical, or solid-state devices (e.g., compact/digital video disks, flash/thumb drives, external solid-state drives, external hard disk drives, flash memory cards/drives that contain nonvolatile memory).
- replay resistance
- glossary
Protection against the capture of transmitted authentication or access control information and its subsequent retransmission with the intent of producing an unauthorized effect or gaining unauthorized access.
- system user
- glossary
An individual or (system) process acting on behalf of an individual that is authorized to access a system.
- Common Weakness Enumeration
- acronym list
CWE: Common Weakness Enumeration
- Greenwich Mean Time
- acronym list
GMT: Greenwich Mean Time
- Hardware Security Module
- acronym list
HSM: Hardware Security Module
- Industrial Internet of Things
- acronym list
IIoT: Industrial Internet of Things
- Large-Scale Integration
- acronym list
LSI: Large-Scale Integration
- Programmable Read-Only Memory
- acronym list
PROM: Programmable Read-Only Memory
- access control
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 19 citations in that document; a definition is pending curation.
- Access control list
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Access List
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- access log
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Access Point
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- account type
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Administrator privileges
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Alternate Work Site
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- Assessment Findings
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- attack surface
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Attack vector
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- audit activity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- audit finding
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Audit function
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- audit report
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- authentication mechanism
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- Authentication Protocol
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Authentication Token
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Authorization Boundary
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- authorized access
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 7 citations in that document; a definition is pending curation.
- authorized personnel
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- authorized user
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Boundary Protection
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- boundary protection device
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- business function
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 7 citations in that document; a definition is pending curation.
- business process
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Classified Information
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Classified National Security Information
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Cloud computing
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- compensating control
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- confidentiality, integrity, and availability
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Configuration Control
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Contingency Planning
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Continuous Monitoring
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- Covert Channel
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- critical function
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- cryptographic algorithm
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Cryptographic Key
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- Cryptographic Module
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Cryptographic Module Validation Program
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- custom software
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- data mining
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- data recovery
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Data retention
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- date and time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- denial of service
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Digital signature
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Dynamic Link Library
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Enterprise Architecture
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Environment of Operation
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- event logging
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- external communication
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- File transfer protocol (FTP)
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- formal contract
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Identification and Authentication
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- identified risk
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- identify and document
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- in order to
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- in response to
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Incident Handling
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Incident Report
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- incident response
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 24 citations in that document; a definition is pending curation.
- incident response activity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- incident response personnel
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Incident response plan
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 7 citations in that document; a definition is pending curation.
- incident response process
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information flow
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 7 citations in that document; a definition is pending curation.
- Information Management
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Information Owner
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information security program
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information sharing
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Information Type
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Interconnection Security Agreement
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- internal system
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Internet protocol
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Internet protocol (IP)
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Intrusion detection
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- Intrusion Detection and Prevention System
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Intrusion detection system
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Intrusion prevention
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Intrusion prevention system
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- IP address
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Key Distribution Center
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Key Establishment
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Key Management
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Key Management Infrastructure
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- layered protection
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Legacy system
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- legal staff
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Likelihood of Occurrence
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Local area network
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Logic Bomb
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- logical access
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Logical access controls
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- logical security
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- malicious activity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Media Sanitization
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- mitigation action
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Mobile Code Technologies
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Mutual Authentication
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- National Security Information
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- need to know
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Network administrator
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- network security
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Non-Organizational User
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- not be necessary
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- not possible
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Object Reuse
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Operating system
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- Operations Security
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Organizational User
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- outsourcing arrangement
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Packet Sniffer
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- password change
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- password complexity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- physical access
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 22 citations in that document; a definition is pending curation.
- physical access control
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- physical access control system
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- physical access log
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- physical security
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Plan of Action and Milestones
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- policy and procedure
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Principle of least privilege
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- prior to
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 9 citations in that document; a definition is pending curation.
- private key
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Privileged access
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Privileged Command
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Proprietary Information
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- protective measure
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Proxy server
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- public key
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Public key infrastructure
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Quality Assurance
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- regulatory agency
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Repair Action
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Replay attack
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- reporting requirement
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Risk management
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Risk mitigation
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- risk response
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- roles and responsibilities
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- root cause
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Ruleset
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- secure coding practice
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- security alert
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Security architecture
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- security assessment report
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Attribute
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Security Control Assessor
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Control Baseline
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Control Effectiveness
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Security Engineering
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- security incident
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Label
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- security patch
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- security policy
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- Security Posture
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- security practice
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Service
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Security violation
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security-Relevant Information
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- senior executive
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- separation of duty
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- service provider
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 8 citations in that document; a definition is pending curation.
- Session Hijacking
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Signature Generation
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- situational awareness
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Smart card
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Social engineering
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Source code
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- storage location
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Strong Authentication
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- supply chain
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 23 citations in that document; a definition is pending curation.
- supply chain risk
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 12 citations in that document; a definition is pending curation.
- suspicious activity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- System Administration
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- System Administrator
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- system configuration
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- system development
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- System Development Life Cycle
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- system integrity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- System Owner
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- System resources
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- system security
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 18 citations in that document; a definition is pending curation.
- tabletop exercise
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Technical Controls
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- termination action
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- test result
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Threat agent
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- time period
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 22 citations in that document; a definition is pending curation.
- timely manner
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Transmission Control Protocol
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Trojan horse
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- unauthorized access
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- unauthorized change
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Unauthorized Disclosure
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 11 citations in that document; a definition is pending curation.
- unauthorized use
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- unusual activity
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- user access
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- user account
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- User Identification
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Vulnerability scanning
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Web server
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Wide area network
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Wireless Access Point
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- wireless network
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Wireless Technology
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Constituent System
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Artificial Intelligence
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Atomic Energy
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Building Block
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Biometric Authentication
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Central Processing Unit
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Compact Disc
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Computing Device
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- Control System
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Chronological Record
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Computer Program
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Carry Out
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Desktop Computer
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Data Structure
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Day of the Week
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- External Storage
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Executive Department
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Executive Branch
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- Facsimile Machine
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Flash Memory
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- File Name
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Federal Government
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Help Desk
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Hard Drive
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Hard Disk
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Hardware Error
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- In Time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Input Device
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Information Processing
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Identification Number
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Joint Venture
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Key Word
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Licensing Agreement
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Life Cycle
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 7 citations in that document; a definition is pending curation.
- Local Time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Magnetic Disk
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Magnetic Tape
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- Memory Chip
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Monitoring Device
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Notebook Computer
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- Network Topology
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Optical Disk
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Output Device
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Plan of Action
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- Point in Time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Quid Pro Quo
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Response Time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Real Time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Scheduled Maintenance
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Sexual Harassment
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Storage Area
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Storage Device
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 7 citations in that document; a definition is pending curation.
- Screen Saver
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- System Clock
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Scoring System
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Software Program
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- System Error
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Staff
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Security Interest
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Solid State
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Transmission Line
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Test Equipment
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Transportation System
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Time Zone
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Time of Day
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- User Interface
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- Universal Time
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- Executive Order
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 14 citations in that document; a definition is pending curation.
- Information Sharing and Analysis Centers
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- CUI categories
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information and systems
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- system boundaries
- attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- system requirements
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- system account
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 13 citations in that document; a definition is pending curation.
- access privilege
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- account management
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- Access authorization
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 9 citations in that document; a definition is pending curation.
- system usage
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- organization-defined time period
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 16 citations in that document; a definition is pending curation.
- organizational policy
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- account manager
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- designated personnel
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- expected inactivity
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organization-defined circumstance
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- administrative privilege
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- point of origin
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- system account attribute
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- security risk
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- system upgrade
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- business requirement
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- travel requirement
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- business owner
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- human resource manager
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- high-risk individual
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organizational personnel
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 11 citations in that document; a definition is pending curation.
- inactivity logout
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- log out
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- defined period
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- automatic enforcement
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- approved authorization
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- access control policy
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- system process
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- passive entity
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organizational system
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 9 citations in that document; a definition is pending curation.
- system access
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 13 citations in that document; a definition is pending curation.
- access enforcement mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- service level
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information flow enforcement
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- connected system
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- subsequent access
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- flow control restrictions include
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- external communications traffic
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- internal web proxy server
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- CUI transfer
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- domain security policy
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- designated policy enforcement point
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- interconnected system
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- architectural solution
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information access
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- hardware mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- one-way information flow
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- trustworthy regrading mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- information flow control policy
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- enforcement mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- designated source
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- flow control
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 5 citations in that document; a definition is pending curation.
- information path
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- encrypted tunnel
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- header information
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- packet-filtering capability
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- message-filtering capability
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- message content
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- key word search
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- document characteristic
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- filtering and inspection mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- software component
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- individuals requiring separation
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- duties of individuals requiring separation
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- system access authorization
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- authorized privilege
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- malevolent activity
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- mission function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- support function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- system support function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- system management
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organizational task
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organization-defined security function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organization-defined security-relevant information
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- configuration parameter
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organization-defined frequency
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 24 citations in that document; a definition is pending curation.
- vulnerability scanning parameter
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- intrusion detection parameter
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- audit information
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- vulnerability information
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- cryptographic key management information
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- organization-defined personnel
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- non-privileged account
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 4 citations in that document; a definition is pending curation.
- non-security function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- non-security information
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- elevated privilege
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- super user account
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- privileged function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 8 citations in that document; a definition is pending curation.
- system behavior
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- non-privileged user
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- system integrity check
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- patching operation
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- system configuration setting
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- cryptographic key management activity
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- intrusion detection and prevention mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- malicious code protection mechanism
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 6 citations in that document; a definition is pending curation.
- access control function
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- non-privileged access
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- significant security risk
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- physical action
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 3 citations in that document; a definition is pending curation.
- active entity
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- flow of CUI
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 2 citations in that document; a definition is pending curation.
- agreement that specifies how the information flow is enforced
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- application domain
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- classes of user
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- settings for event
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- filtering rule
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
- authorizations to execute
- attested_usage_reviewer_confirmed
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.