Model Glossary - Revision history

Wikiadmin at 23:31, 30 November 2022

2022-11-30T23:31:32Z

← Older revision		Revision as of 23:31, 30 November 2022
Line 1:		Line 1:
	'''Source of Reference: official [https://~~www~~.~~acq~~.~~osd.mil~~/~~cmmc~~/~~documentation.html~~ CMMC Glossary] from ~~Office of Under Secretary~~ of Defense ~~for Acquisition & Sustainment~~.'''		'''Source of Reference: official [https://dodcio.defense.gov/CMMC/Documentation/ CMMC Glossary] from Department of Defense Chief Information Officer (DoD CIO).'''

	For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.

Wikiadmin at 04:58, 27 February 2022

2022-02-27T04:58:48Z

← Older revision		Revision as of 04:58, 27 February 2022
Line 1:		Line 1:
	'''Source of Reference: official [https://www.acq.osd.mil/cmmc/documentation.html CMMC Glossary] from Office of Under Secretary of Defense Acquisition & Sustainment.'''		'''Source of Reference: official [https://www.acq.osd.mil/cmmc/documentation.html CMMC Glossary] from Office of Under Secretary of Defense for Acquisition & Sustainment.'''

	For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.		For inquiries and reporting errors on this wiki, please [mailto:support@cmmctoolkit.org contact us]. Thank you.

Wikiadmin: /* R */

2022-02-27T00:22:14Z

← Older revision		Revision as of 00:22, 27 February 2022
Line 1,008:		Line 1,008:
	\|-		\|-
	\|Risk Mitigation Plan		\|Risk Mitigation Plan
	A strategy for mitigating risk that seeks to minimize risk to an acceptable level.		\|A strategy for mitigating risk that seeks to minimize risk to an acceptable level.
	\|\|		\|
	* CERT RMM v1.2		* CERT RMM v1.2
	\|-		\|-

Wikiadmin: /* M */

2022-02-27T00:21:53Z

← Older revision		Revision as of 00:21, 27 February 2022
Line 768:		Line 768:
	* NIST SP 800-160 (adapted)		* NIST SP 800-160 (adapted)
	\|-		\|-
	\|Multifactor ~~Au ntication~~ (MFA)		\|Multifactor Authentication (MFA)
	\|An authentication system or an authenticator that requires more than one authentication factor for successful authentication. Multifactor authentication can be performed using a single authenticator that provides more than one factor or by a combination of authenticators that provide different factors.		\|An authentication system or an authenticator that requires more than one authentication factor for successful authentication. Multifactor authentication can be performed using a single authenticator that provides more than one factor or by a combination of authenticators that provide different factors.
	The three authentication factors are something you know, something you have, and something you are.		The three authentication factors are something you know, something you have, and something you are.

Wikiadmin at 18:53, 26 February 2022

2022-02-26T18:53:46Z

Show changes

Wikiadmin at 15:57, 23 February 2022

2022-02-23T15:57:37Z

← Older revision		Revision as of 15:57, 23 February 2022
Line 962:		Line 962:
	\|		\|
	* NIST SP 800-33 (adapted)		* NIST SP 800-33 (adapted)
	Resilience		\|-
	The ability to prepare for and adapt to changing conditions and withstand and recover rapidly from disruptions. Resilience includes ability to withstand and recover from deliberate attacks, accidents, or naturally occurring threats or incidents.		\|Resilience
			\|The ability to prepare for and adapt to changing conditions and withstand and recover rapidly from disruptions. Resilience includes ability to withstand and recover from deliberate attacks, accidents, or naturally occurring threats or incidents.
	\|		\|
	* PPD 21		* PPD 21
	Restricted Information Systems		\|-
	Systems (and associated IT components comprising system) that are configured based on government requirements (i.e., connected to something that was required to support a functional requirement) and are used to support a contract (e.g., fielded systems, obsolete systems, and product deliverable replicas).		\|Restricted Information Systems
			\|Systems (and associated IT components comprising system) that are configured based on government requirements (i.e., connected to something that was required to support a functional requirement) and are used to support a contract (e.g., fielded systems, obsolete systems, and product deliverable replicas).
	\|		\|
	* CMMC		* CMMC
	Risk		\|-
	A measure of extent to which an entity is threatened by a potential circumstance or event, and typically a function of:		\|Risk
	* The adverse impacts that would arise if circumstance or event occurs and		\|A measure of extent to which an entity is threatened by a potential circumstance or event, and typically a function of:
			* The adverse impacts that would arise if circumstance or event occurs and
	* The likelihood of occurrence.		* The likelihood of occurrence.
	System-related security risks are those risks that arise from loss of confidentiality, integrity, or availability of information or systems. Such risks reflect potential adverse impacts to organizational operations, organizational assets, individuals, o r organizations, and Nation.		System-related security risks are those risks that arise from loss of confidentiality, integrity, or availability of information or systems. Such risks reflect potential adverse impacts to organizational operations, organizational assets, individuals, o r organizations, and Nation.
	\|		\|
	* FIPS 200 (adapted)		* FIPS 200 (adapted)
	Risk Analysis		\|-
	The process of identifying risks to system security and determining likelihood of occurrence, resulting impact, and additional safeguards that mitigate this impact.Part of risk management and synonymous with risk assessment.		\|Risk Analysis
			\|The process of identifying risks to system security and determining likelihood of occurrence, resulting impact, and additional safeguards that mitigate this impact.Part of risk management and synonymous with risk assessment.
	\|		\|
	* NIST SP 800-27		* NIST SP 800-27
	\|-		\|-
	\|Risk Assessment		\|Risk Assessment
			\|
	* The process of identifying risks to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, o r organizations, and Nation, resulting from operation of a system.		* The process of identifying risks to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, o r organizations, and Nation, resulting from operation of a system.
	* Part of risk management, incorporates threat and vulnerability analyses, and considers mitigations provided by security controls planned or in place. Synonymous with risk analysis.		* Part of risk management, incorporates threat and vulnerability analyses, and considers mitigations provided by security controls planned or in place. Synonymous with risk analysis.
Line 1,072:		Line 1,077:
	\|		\|
	* CMMC		* CMMC
	Security Practice Assessment		\|-
	See Glossary: Security Control Assessment		\|Security Practice Assessment
	Sensitive Information		\|See Glossary: Security Control Assessment
	Information where loss, misuse, or unauthorized access or modification could adversely affect national interest or conduct of federal programs, or privacy to which individuals are entitled under 5 U.S.C. Section 552a (The Privacy Act).		\|
			\|-
			\|Sensitive Information
			\|Information where loss, misuse, or unauthorized access or modification could adversely affect national interest or conduct of federal programs, or privacy to which individuals are entitled under 5 U.S.C. Section 552a (The Privacy Act).
	\|		\|
	* NIST SP 800-53 Rev 4 (adapted)		* NIST SP 800-53 Rev 4 (adapted)
Line 1,276:		Line 1,284:
	\|		\|
	* NISTIR 8011 Vol. 1		* NISTIR 8011 Vol. 1
			\|}

	== W ==		== W ==

Wikiadmin at 15:26, 23 February 2022

2022-02-23T15:26:32Z

Show changes

Wikiadmin at 06:20, 23 February 2022

2022-02-23T06:20:16Z

← Older revision		Revision as of 06:20, 23 February 2022
Line 678:		Line 678:
	\|-		\|-
	\|Internet of Things (IoT)		\|Internet of Things (IoT)
	Interconnected devices having physical or virtual representation in digital world, sensing/actuation capability, and programmability features.The y are uniquely identifiable and may include smart electric grids, lighting, heating, air conditioning, and fire and smoke detectors.		\|Interconnected devices having physical or virtual representation in digital world, sensing/actuation capability, and programmability features.The y are uniquely identifiable and may include smart electric grids, lighting, heating, air conditioning, and fire and smoke detectors.
	\|		\|
	* iot.ieee.org/definition		* iot.ieee.org/definition

Wikiadmin at 06:18, 23 February 2022

2022-02-23T06:18:50Z

← Older revision		Revision as of 06:18, 23 February 2022
Line 751:		Line 751:
	\|-		\|-
	\|Mobile Device		\|Mobile Device
	A portable computing device that:		\|A portable computing device that:
	* has a small form factor such that it can easily be carried by a single individual;		* has a small form factor such that it can easily be carried by a single individual;
	* is designed to operate without a physical connection (e.g., wirelessly transmit or receive information);		* is designed to operate without a physical connection (e.g., wirelessly transmit or receive information);
Line 810:		Line 810:
	\|-		\|-
	\|Organizational Asset		\|Organizational Asset
	See Glossary: Asset		\|See Glossary: Asset
			\|
	* NISTIR 7693		* NISTIR 7693
	* NISTIR 7694		* NISTIR 7694

Wikiadmin at 06:17, 23 February 2022

2022-02-23T06:17:32Z

Show changes