Terms starting with “S”

See Authorization. Security Authorization - (To Operate) See Authorization (to operate). (CNSSI-4009) (NISTIR)

See authorization to operate (ATO). Source: NIST SP 800-37 Rev 1

See Authorization Boundary. (NISTIR)

Documents the results of the security control assessment and provides the authorizing official with essential information needed to make a risk-based decision on whether to authori...

The use of information technology in place of manual processes for cyber incident response and management.

An information security area that includes a grouping of tools, technologies, and data. (SP 800-137) (NISTIR)

1. A persistent visible window on a computer monitor that displays the highest level of data accessible during the current session. 2. The opening screen that informs users of the...

The process of determining the security category for information or an information system. Security categorization methodologies are described in CNSS Instruction 1253 for national...

The characterization of information or an information system based on an assessment of the potential impact that a loss of confidentiality, integrity, or availability of such infor...

For security purposes, each touchscreen must "along with each associated activating and DRE recording device and component, employ a unique, electronically implanted election speci...

(Security CONOP) A security-focused description of an information system, its operational policies, classes of users, interactions between the system and its users, and the system'...

A security-focused description of an information system, its operational policies, classes of users, interactions between the system and its users, and the system's contribution to...

A suite of specifications that standardize the format and nomenclature by which software flaw and security configuration information is communicated, both to machines and humans. S...

The testing and/or evaluation of the management, operational, and technical security controls in an information system to determine the extent to which the controls are implemented...

The individual, group, or organization responsible for conducting a security control assessment. (SP 800-37; SP 800-53A) (NISTIR)

The individual, group, or organization responsible for conducting a security control assessment. Source: NIST SP 800-37 Rev 1

The set of minimum security controls defined for a low-impact, moderate- impact, or high-impact information system. Source: FIPS PUB 200

The measure of correctness of implementation (i.e., how consistently the control implementation complies with the security plan) and how well the security plan meets organizational...

Statements of security capability to 1) build in additional, but related, functionality to a basic control; and/or 2) increase the strength of a basic control. Source: NIST SP 800-...

A situation in which an information system or application receives protection from security controls (or portions of security controls) that are developed, implemented, and assesse...

An organizational official responsible for the development, implementation, assessment, and monitoring of common controls (i.e., security controls inherited by information systems)...

Management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availabili...

The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system. (CNSSI-4009) (NISTIR)

A "printed designation placed on a ballot to identify to the computer program the offices and propositions for which votes may be cast and to indicate the manner in which votes cas...