Terms starting with “C”

An information system service (e.g., telecommunications service) provided by a commercial service provider typically to a large and diverse set of consumers. The organization acqui...

Standard identification/smart card issued by the Department of Defense (DoD) that has an embedded integrated chip storing public key infrastructure (PKI) certificates. Note: As per...

In a telecommunications context, a telecommunications company that holds itself out to the public for hire to provide communications transmission services. Note: In the United Stat...

A nomenclature and dictionary of software security configurations.

A SCAP specification that provides unique, common identifiers for configuration settings found in a wide variety of hardware and software products. (SP 800-128) (NISTIR)

A set of measures of the severity of software security configuration issues. (NISTIR 7502) (NISTIR)

A security control that is inherited by one or more organizational information systems. See security control inheritance. Source: NIST SP 800-37 Rev 1

An organizational official responsible for the development, implementation, assessment, and monitoring of common controls (i.e., security controls inherited by information systems)...

Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems.

Standard and practice of storing and creating data in a common, described format that can be read by other systems.

One of a family of devices developed to read-in, transfer, or store key. (CNSSI-4009) (NISTIR)

Any one of a family of devices developed to read-in, transfer, or store key. Source: NSA/CSS Manual Number 3-16 (adapted) (COMSEC)

A "format described in ISO/IEC 25062:2006, 'Common Industry Format (CIF) for Usability Test Reports'." VVSG. Abbreviated CIF.

Refers to the format described in ANSI/INCITS 354-2001 "Common Industry Format (CIF) for Usability Test Reports."

(CMSS) A set of measures of the severity of software feature misuse vulnerabilities. A software feature is a functional capability provided by software. A software feature misuse v...

(CPE) A SCAP specification that provides a standard naming convention for operating systems, hardware, and applications for the purpose of providing consistent, easily parsed names...

A nomenclature and dictionary of hardware, operating systems, and applications. Source: NIST SP 800-126 Rev 2

A federal organization that provides National Security System-Public Key Infrastructure (NSS-PKI) support to other federal organizations, academia and industrial partners requiring...

User application software developed to run on top of the local COMSEC management software (LCMS) on the local management device/key processor (LMD/KP). Source: CNSSI No. 4005 (COMS...

A nomenclature and dictionary of security-related software flaws.

The generic name for known cybersecurity vulnerabilities that have been catalogued by the CVE program. There is one CVE Record for each vulnerability in the catalog.

A dictionary of common names for publicly known information system vulnerabilities. (SP 800-51; CNSSI-4009) (NISTIR)

A system for measuring the relative severity of software flaw vulnerabilities.

An SCAP specification for communicating the characteristics of vulnerabilities and measuring their relative severity. (SP 800-128) (NISTIR)