home/glossary/information security program

information security program

nounid 2886·updated May 18, 2026
verified

A documented approach for organizing and directing all activities undertaken to ensure the confidentiality, integrity, and availability of the information held by the organization.

MWE

Attested in

NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems1 citation · 1 machine-matched · observed 2026-09-01 under anchor/0.9/36451/2026-09-01
03.02.02.b ¶ 2

Classifications

Entity Type

Process85%llm-generatedllm:claude-haiku-4-5

Sensitivity

Internal72%llm-generatedllm:claude-haiku-4-5

Information Class

unclassified

Variants

synonym
information systems security program
plural
information security programs
possessive
information security program's
pluralpossessive
information security programs'

Framework definitions

ISACA Cybersecurity Glossary1 senseview framework →
§1
The overall combination of technical, operational and procedural measures and management structures implemented to provide for the confidentiality, integrity and availability of information based on business requirements and risk analysis
FFIEC Cybersecurity Assessment Tool, Baseline, May 20171 senseview framework →
§1
A documented approach for organizing and directing all activities undertaken to ensure the confidentiality, integrity, and availability of the information held by the organization.
NIST SP 800-171r31 senseview framework →
§1 · attested_usage_pack_match
No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.
Increment 2: attested in 800-171r3 without a glossary definition.
Legacy lexicon import1 senseview framework →
§1 · legacy_primary
A documented approach for organizing and directing all activities undertaken to ensure the confidentiality, integrity, and availability of the information held by the organization.
DR-088 backfill from the noun definition column

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.