Cybersecurity Compliance Glossary

A reference for defense and public sector teams navigating federal cybersecurity compliance.

Browse by category

Browse A-Z

Showing 379 terms

B

Baseline Configuration

Basic Safeguarding of Covered Contractor Information Systems

Boundary Cloud Access Point

Boundary Protection

Breach Notification

C

CM-6 Configuration Settings

CMMC Level 1 (Foundational)

CMMC Level 2 (Advanced)

CMMC Level 3 (Expert)

CMMC Third-Party Assessment Organization

CUI Cover Sheet

CUI Executive Agent

Capability Package

Certificate Revocation List

Certification Class

Certification and Accreditation (C&A)

Chief Data Officer (CDO)

Chief Information Officer

Chief Information Security Officer

Classified National Security Information

Cloud Access Point

Cloud Service Offering

Cloud Service Provider

Cognizant Security Agency

Cognizant Security Office (CSO)

Collaborative ConMon

Commercial National Security Algorithm Suite

Commercial National Security Algorithm Suite 2.0

Commercial Solutions for Classified

Committee on National Security Systems

Committee on National Security Systems Instruction No. 1253

Common Access Card

Common Control Provider

Common Controls

Common Criteria Evaluation and Validation Scheme

Common Vulnerabilities and Exposures

Compensating Controls

Compliance Representations and Certifications

Component Authenticity

Confidentiality, Integrity, Availability (CIA)

Configuration Control Board

Configuration Management

Containment, Eradication, Recovery

Continuous Authorization

Continuous Diagnostics and Mitigation

Continuous Monitoring

Continuous Vetting

Contract Data Requirements List

Contracting Officer

Contracting Officer's Representative

Control Assessment Objectives

Control Baseline

Control Enhancements

Control Tailoring

Controlled Technical Information

Controlled Unclassified Information

Covered Contractor Information System

Covered Cyber Incident

Covered Defense Information

Credential Service Provider

Criticality Analysis

Criticality Analysis Process Model

Cryptographic Algorithm Validation Program

Cryptographic Boundary

Cryptographic Module Validation Program

Customer Responsibility Matrix

Customer-Configured Controls

Cyber Incident Reporting Portal

Cyber Incident Reporting for Critical Infrastructure Act of 2022

Cybersecurity Maturity Model Certification

Cybersecurity Supply Chain Risk Management

D

DFARS 252.204-7008

DFARS 252.204-7012 (Safeguarding Covered Defense Information and Cyber Incident Reporting)

DFARS 252.204-7019

DFARS 252.204-7020

DFARS 252.204-7021

Data Flow Diagram

Data Loss Prevention

Data Owner / Steward

Data in Transit

Data-at-Rest (DAR) Capability Package

Declassification

Defense Federal Acquisition Regulation Supplement

Defense Industrial Base Cybersecurity Assessment Center

Defense Information System for Security

Defense-in-Depth

Department of Defense Chief Information Officer

Derivative Classification

Derived PIV Credential

Determination Statement

Deviation Reporting

Deviation Request

Distribution Statements

DoD CUI Registry

DoD Cloud Computing Security Requirements Guide

DoD Cloud Service Catalog

DoD Cyber Crime Center

DoD Instruction 5200.48

DoD Provisional Authorization

E

E-Government Act of 2002

Elliptic Curve Digital Signature Algorithm

Encryption at Rest

Encryption in Transit

Endpoint Detection and Response

Enterprise Mission Assurance Support Service

Evaluation Assurance Level

Executive Order 13526

Executive Order 13556

Executive Order 14028

Executive Order 14306

Extended Period of Eligibility

G

Google Assured Workloads

H

Handling Caveats

Head of Contracting Activity

Host-Based Security System

J

Joint Authorization Board

L

Least Functionality

Least Privilege

Legacy Markings (FOUO/SBU)

Lessons Learned

Likelihood Determination

Limited Dissemination Controls

M

Malware Submission

Media Preservation

Media Sanitization

Monitor Step (RMF)

Monthly ConMon Deliverables

Multi-Factor Authentication

N

NISPOM (32 CFR Part 117)

NIST Cybersecurity Framework

NIST Privacy Framework

NIST SP 800-137, Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations

NIST SP 800-140 series

NIST SP 800-160

NIST SP 800-161

NIST SP 800-162, Guide to Attribute Based Access Control (ABAC) Definition and Considerations

NIST SP 800-171 DoD Assessment Requirement

NIST SP 800-171A

NIST SP 800-172

NIST SP 800-207, Zero Trust Architecture

NIST SP 800-218

NIST SP 800-53A

NIST SP 800-53B

NIST Special Publication 800-128, Guide for Security-Focused Configuration Management of Information Systems

NIST Special Publication 800-171

NIST Special Publication 800-30

NISTIR 8276, Key Practices in Cyber Supply Chain Risk Management: Observations from Industry

National Background Investigation Services

National Industrial Security Program

National Information Assurance Partnership

National Security Adjudicative Guidelines (SEAD 4)

National Security System

National Voluntary Laboratory Accreditation Program

National Vulnerability Database

Non-Person Entity

Non-classified Internet Protocol Router Network

Nonfederal Systems

O

OMB Circular A-130

Ongoing Authorization

Open Security Controls Assessment Language

Open Source Software Risk

Oracle National Security Regions

Organization-Defined Parameter

Original Classification Authority

P

Patch Management

Personal Identity Verification

Personnel Vetting Questionnaire

Plan of Action and Milestones

Portion Marking

Post-Quantum Cryptography

Privacy Officer

Privileged Access Management

Program Management (PM) Controls

Program Manager

Protection Profile

Public Key Infrastructure

R

Ransom Payment Reporting

Readiness Assessment Report

Remote Access Control

Risk Assessment

Risk Executive (Function)

Risk Management Framework

Role-Based Access Control

S

SEAD 3 Self-Reporting

SEAD 6 Continuous Evaluation

SF-86 / SF-85 / SF-85P

Secret Internet Protocol Router Network

Section 889 Prohibition

Sector Risk Management Agency

Secure Cloud Computing Architecture

Secure Software Development Framework

Security Assessment Plan

Security Assessment Report (SAR)

Security Categorization

Security Classification Guide

Security Content Automation Protocol

Security Control Assessment

Security Control Family

Security Executive Agent

Security Requirements Guide

Security Technical Implementation Guide

Self-Assessment

Senior Agency Information Security Officer

Senior Agency Official for Privacy

Sensitive Compartmented Information

Separation of Duties

Shared Responsibility Model

Significant Change Request

Situational Awareness

Software Bill of Materials

Software Composition Analysis

Source Selection

Special Access Program

Statement of Work

Subcontractor Flow-Down

Supplier Performance Risk System

Supplier Relationships

Supply Chain Risk Management (SR) Control Family

System Administrator

System Boundary Diagram

System Development Life Cycle

System Security Plan

T

Tabletop Exercise

Tamper Resistance and Detection

Third Party Assessment Organization

Third-Party Assessment Organization

Tier 1/2/3 Risk Management

Transport Layer Security

Trusted Internet Connections 3.0

Trusted Platform Module

Trusted Suppliers

Trusted Workforce 2.0

Two-Layer Encryption

Type 1 Encryption

U

US-CERT / CISA Reporting

V

Vendor Risk Assessment

Vulnerability Assessment

Vulnerability Disclosure Program (VDP)

Vulnerability Scanning

X

X.509 Certificate

Z

Zero Trust Architecture