Terms starting with “I”

Formal document that provides an overview of the security requirements for an organization-wide information security program and describes the program management controls and commo...

The risk to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other organizations, and the Nation due to the potentia...

An exchange of data, information, and/or knowledge to manage risks or respond to incidents.

Operational entities formed by critical infrastructure owners and operators to gather, analyze, appropriately sanitize, and disseminate intelligence and information related to crit...

"Any formal or informal entity or collaboration created or employed by public or private sector organizations, for purposes of gathering and analyzing critical infrastructure infor...

1. An approach that facilitates the sharing of terrorism and homeland security information; or 2. ISE in its broader application enables those in a trusted partnership to share, di...

1. An approach that facilitates the sharing of terrorism and homeland security information. 2. ISE in its broader application enables those in a trusted partnership to share, disco...

Individual or group that helps to ensure the careful and responsible management of federal information belonging to the Nation as a whole, regardless of the entity or source that m...

. The operational advantage derived from the ability to collect, process, and disseminate an uninterrupted flow of information while exploiting or denying an adversary's ability to...

A discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information. [Note: Information system...

A discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information. Source: 44 U.S.C. Sec 350...

See authorization boundary. Source: NIST SP 800-37 Rev 1

A discrete, identifiable information technology asset (e.g., hardware, software, firmware) that represents a building block of an information system. Information system components...

Management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies,...

The phases through which an information system passes, typically characterized as initiation, development, operation, and termination (i.e., sanitization, disposal and/or destructi...

Official responsible for the overall procurement, development, integration, modification, or operation and maintenance of an information system.

Official responsible for the overall procurement, development, integration, modification, or operation and maintenance of an information system. (SP 800-53; SP 800-53A; SP 800-18;...

The ability of an information system to continue to: (i) operate under adverse conditions or stress, even if in a degraded or debilitated state, while maintaining essential operati...

Individual assigned responsibility by the senior agency information security officer, authorizing official, management official, or information system owner for maintaining the app...

A capability provided by an information system that facilitates information processing, storage, or transmission. Source: NIST SP 800-53 Rev 4

Risk that arises through the loss of confidentiality, integrity, or availability of information or information systems considering impacts to organizational operations and assets,...

(INFOSEC) Protection of information systems against unauthorized access to or modification of information, whether in storage, processing, or transit, and against the denial of ser...

The protection of information systems against unauthorized access to or modification of information, whether in storage, processing or transit, and against the denial of service to...

An imaginary definable perimeter encompassing all the critical functions in an INFOSEC product and separating them from all other functions within the product. Note: INFOSEC Bounda...