CNSSI-4009 change to a Security “Any system’s change or configuration, environment, information content, functionality, or event users which has the potential to change the risk imposed upon its continued operations. “ Security (privacy) CNSSI-4009 Mandated privacy requirements requirements Security (privacy) CNSSI-4009 requirements traceability matrix Security (Privacy) CNSSI-4009 Safeguards Security (privacy) NIST SP 800-27 capability that supports one, or “A many, of the security goals. Examples service of security services are key management, access control, and authentication “ Security (privacy) tag FIPS 188 unit containing a “Information representation of certain security- information (e.g., a restrictive attribute bit map). “ CNSSI-4009 Security (privacy) test, eval, assess etc. CNSSI-4009 elements of Sensitivity (for privacy “Information representing data) label the security label(s) of a subject and an object. Sensitivity labels are used by the trusted computing base (TCB) as the basis for mandatory access control decisions. See Security Label. “ SLA for Privacy TBD CNSSI-4009 Signed data (applied to privacy) Privacy Spillage CNSSI-4009 incident that results in the “Security transfer of classified or CUI information onto an information system not accredited (i.e., authorized) for the appropriate security level. “ Status (for privacy NIST SP 800-137 Person or s/w agent the information security “Monitoring components) metrics defined by the organization in monitoring the information security ISCM strategy. “
Security change or event CNSSI-4009 “Any change to a system’s configuration, environment, information content, functionality, or users which has the potential to change the risk imposed upon its continued operations. “ Security (privacy) requirements CNSSI-4009 Mandated privacy requirements Security (privacy) requirements traceability matrix CNSSI-4009 Security (Privacy) Safeguards CNSSI-4009 Security (privacy) service NIST SP 800-27 “A capability that supports one, or many, of the security goals. Examples of security services are key management, access control, and authentication “ Security (privacy) tag FIPS 188 “Information unit containing a representation of certain information (e.g., a restrictive attribute bit map). “ Security (privacy) test, eval, assess etc. CNSSI-4009 Sensitivity (for privacy data) label CNSSI-4009 “Information representing elements of the security label(s) of a subject and an object. Sensitivity labels are used by the trusted computing base (TCB) as the basis for mandatory access control decisions. See Security Label. “ SLA for Privacy TBD Signed data (applied to privacy) CNSSI-4009 Privacy Spillage CNSSI-4009 “Security incident that results in the transfer of classified or CUI information onto an information system not accredited (i.e., authorized) for the appropriate security level. “ Status (for privacy components) monitoring NIST SP 800-137 Person or s/w agent “Monitoring the information security metrics defined by the organization in the information security ISCM strategy. “ security-