Security Control Assessment
nounid
4039·updated May 9, 2026verified
The testing or evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization. [18]
polysemousMWE
Attested in
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
3.2.2 ¶ 43.2.2 ¶ 1473.2.2 ¶ 150
Classifications
Entity Type
Organizational Task100%manual reviewaxis_review_queue.v1
Sensitivity
Regulated80%llm-generatedllm:claude-haiku-4-5
Information Class
Cui65%llm-generatedllm:claude-haiku-4-5
Variants
- plural
- Security Control Assessments
- possessive
- Security Control Assessment's
- pluralpossessive
- Security Control Assessments'
Framework definitions
- §1
- The testing and/or evaluation of the management, operational, and technical security controls in an information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system.
- §2 · sense_2_pending_review
- The testing and/or evaluation of the management, operational, and technical security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system and/or enterprise.
- §1
- The testing and/or evaluation of the management, operational, and technical security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system and/or enterprise.
- §1
- The testing and/or evaluation of the management, operational, and technical security controls in an information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system.
- §1
- The testing and/or evaluation of the management, operational, and technical security controls in an information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system.
- §1
- The testing and/or evaluation of the management, operational, and technical security controls in an information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system.
- §1 · glossary
- The testing or evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization. [18]Attribution from the CKI glossary mapping stage (glossary)
- §1 · glossary
- The testing or evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization. [13]Attribution from the CKI glossary mapping stage (glossary)
- §1 · legacy_primary
- The testing and/or evaluation of the management, operational, and technical security controls in an information system to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system.DR-088 backfill from the noun definition column
Outgoing relationships
No outgoing triples
This term is not the subject of any RDF-style relationship yet.
Incoming relationships
No incoming triples
No other term currently asserts a relationship to this one.