Terms starting with “S”

A domain that implements a security policy and is administered by a single authority. Source: CNSSP No. 24; CNSSI No. 1253F Attachment 3

collection of entities to which applies a single security policy executed by a single authority. SOURCE: FIPS 188 A domain that implements a security policy and is administered by...

An interdisciplinary approach and means to enable the realization of secure systems. It focuses on defining customer needs, security protection requirements, and required functiona...

The outer envelope in which a voter returns an by mail. The voter's ABSENTEE BALLOT eligibility to vote is determined from matter written on the security envelope. If the voter is...

An assessment usually performed on information system hardware, to determine the security properties of a device when hardware fault is encountered.

(SFUG) Guide or manual explaining how the security mechanisms in a specific system work. (CNSSI-4009) (NISTIR)

Guide or manual explaining how the security mechanisms in a specific system work.

A secure subsystem of an information system that enforces security policy on the data passing through it.

The hardware, software, and/or firmware of the information system responsible for enforcing the system security policy and supporting the isolation of code and data on which the pr...

The five security goals are confidentiality, availability, integrity, accountability, and assurance. (SP 800-27) (NISTIR)

The analysis conducted by an organizational official to determine the extent to which changes to the information system have affected the security state of the system. Source: NIST...

See incident. Source: NIST IR 7298 Rev 2

Application that provides the ability to gather security data from information system components and present that data as actionable information via a single interface. (SP 800-128...

Examination of an information system to determine compliance with security policy, procedures, and practices.

Hardware, firmware, and software elements of a trusted computing base implementing the reference monitor concept. Security kernel must mediate all accesses, be protected from modif...

The means used to associate a set of security attributes with a specific information object as part of the data structure for that object. Source: NIST SP 800-53 Rev 4

A hierarchical indicator of the degree of sensitivity to a certain threat. It implies, according to the security policy being enforced, a specific level of protection. (FIPS 188) (...

A tool that consolidates and communicates information relevant to the organizational security posture in near real-time to security management stakeholders. (SP 800-128) (NISTIR)

The means used to associate a set of security attributes with objects in a human-readable form, to enable organizational process-based enforcement of information security policies....

A device or function designed to provide one or more security services usually rated in terms of strength of service and assurance of the design.

Management system overseeing and controlling implementation of network security policy. (CNSSI-4009) (NISTIR)

Confidentiality, integrity, or availability. (SP 800-53; SP 800-53A; SP 800-60; SP 800-37; FIPS 200; FIPS 199) (NISTIR)

A body engaged by Project SERVE to evaluate the system's security design. Abbreviated SPRG.

A physical or logical boundary that is defined for a system, domain, or enclave; within which a particular security policy or security architecture is applied.