Terms starting with “I”

Individual who works IA issues and has real world experience plus appropriate IA training and education commensurate with their level of IA responsibility. Note: DoDI 8500.01 has t...

In the NICE Framework, cybersecurity work where a person: Oversees, evaluates, and supports the documentation, validation, and accreditation processes necessary to assure that new...

(IAC) An application (hardware and/or software) that provides one or more Information Assurance capabilities in support of the overall security and operational objectives of a syst...

An application (hardware and/or software) that provides one or more Information Assurance capabilities in support of the overall security and operational objectives of a system. No...

See information systems security manager (ISSM).

See information systems security officer (ISSO).

Notification that is generated when an Information Assurance vulnerability may result in an immediate and potentially severe threat to DoD systems and information; this alert requi...

Addresses new vulnerabilities that do not pose an immediate risk to DoD systems, but are significant enough that noncompliance with the corrective action could escalate the risk.

A three-part concept for information sharing, independent of, and across information systems and security domains that 1) identifies information sharing participants as individual...

The aggregate of individuals, organizations, and systems that collect, process, disseminate, or act on information. Source: JP 3-13

Procedure to ensure that information transfers within an information system are not made in violation of the security policy.

The planning, budgeting, manipulating, and controlling of information throughout its life cycle.

The integrated employment of the core capabilities of electronic warfare, computer network operations, psychological operations, military deception, and operations security, in con...

The integrated employment, during military operations, of information-related capabilities in concert with other lines of operation to influence, disrupt, corrupt, or usurp the dec...

Official with statutory or operational authority for specified information and responsibility for establishing the controls for its generation, classification, collection, processi...

Information and related resources, such as personnel, equipment, funds, and information technology. Source: 44 U.S.C. SEC. 3502

The planning, budgeting, organizing, directing, training, controlling, and management activities associated with the burden, collection, creation, use, and dissemination of informa...

The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integ...

The protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction in order to provide confidentiality, integ...

Individual, group, or organization responsible for ensuring that the information security requirements necessary to protect the organization's core missions and business processes...

Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Note: The terms "continuous" and "ongoing"...

A process to: • Define an ISCM strategy; • Establish an ISCM program; • Implement an ISCM program; • Analyze data and Report findings; • Respond to findings; and • Review and Updat...

A program established to collect information in accordance with preestablished metrics, utilizing information readily available in part through implemented security controls. (SP 8...

Aggregate of directives, regulations, and rules that prescribe how an organization manages, protects, and distributes information.