threats, analysis of vulnerabilities, assessment of risks, and application of appropriate countermeasures. NSA-approved modification not required for universal implementation by all holders of a COMSEC end-item. This of modification requires all of the engineering/doctrinal Optional modification control of mandatory modification but is usually not related to security, safety, TEMPEST, or reliability. (See mandatory modification.) Organizational maintenance Limited maintenance performed by a user organization. Entity within the PKI that authenticates the authority (ORA) identity and the Organizational registration organizational affiliation of the users. Providing electronic key via over-the-air rekeying, over-the-air key transfer, or Over-the-air key distribution cooperative key generation. Electronically distributing key without changing traffic encryption key used on the Over-the-air key transfer secured communications path over the transfer is accomplished. Changing traffic encryption key or transmission security key in remote Over-the-air rekeying (OTAR) by sending new key directly to the remote crypto-equipment over the communications path it secures. Communications path within a computer system or network designed for the Overt channel authorized transfer of data. (See covert channel.) Overwrite procedure Process of writing patterns of data on top of the data stored on a magnetic medium. P Parity Bit(s) used to determine whether a block of data has been altered. information system security mode of operation wherein all personnel have the Partitioned security mode clearance, but not necessarily formal access approval and need-to-know, for all information handled by an information system. Protected/private string of letters, numbers, and special characters used to Password authenticate an identity or to authorize access to data.
threats, analysis of vulnerabilities, assessment of risks, and application of appropriate countermeasures. Optional modification NSA-approved modification not required for universal implementation by all holders of a COMSEC end-item. This of modification requires all of the engineering/doctrinal control of mandatory modification but is usually not related to security, safety, TEMPEST, or reliability. (See mandatory modification.) Organizational maintenance Limited maintenance performed by a user organization. Organizational registration Entity within the PKI that authenticates the authority (ORA) identity and the organizational affiliation of the users. Over-the-air key distribution Providing electronic key via over-the-air rekeying, over-the-air key transfer, or cooperative key generation. Over-the-air key transfer Electronically distributing key without changing traffic encryption key used on the secured communications path over the transfer is accomplished. Over-the-air rekeying (OTAR) Changing traffic encryption key or transmission security key in remote by sending new key directly to the remote crypto-equipment over the communications path it secures. Overt channel Communications path within a computer system or network designed for the authorized transfer of data. (See covert channel.) Overwrite procedure Process of writing patterns of data on top of the data stored on a magnetic medium. P Parity Bit(s) used to determine whether a block of data has been altered. Partitioned security mode information system security mode of operation wherein all personnel have the clearance, but not necessarily formal access approval and need-to-know, for all information handled by an information system. Password Protected/private string of letters, numbers, and special characters used to authenticate an identity or to authorize access to data.
CISSP_Glossary_v1.1.docx