Category: P-T

Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other…

The formal document prepared by the information system owner (or common security controls owner for inherited controls) that provides an overview of…

Attacks that allow the adversary to utilize implants or other vulnerabilities inserted prior to installation in order to infiltrate data, or manipulate…

A systematic process for managing supply chain risk by identifying susceptibilities, vulnerabilities, and threats throughout the supply chain and developing mitigation strategies…

A system of organizations, people, activities, information, and resources, possibly international in scope, that provides products or services to consumers. Source: CNSSI…

A document, established by consensus and approved by a recognized body, that provides for common and repeated use, rules, guidelines or characteristics…

Information where the loss, misuse, or unauthorized access or modification could adversely affect the national interest or the conduct of federal programs,…

Security policies define the objectives and constraints for the security program. Policies are created at several levels, ranging from organization or corporate…

The program and supporting processes to manage information security risk to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other…

Risk Assessment The process of identifying risks to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other organizations, and the…