NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Mechanisms – An assessment object that includes specific protection-related items
(e.g., hardware, software, or firmware) employed within or at the
boundary of an information system.
SOURCE: SP 800-53A
Media – Physical devices or writing surfaces including but not limited to
magnetic tapes, optical disks, magnetic disks, Large Scale Integration
(LSI) memory chips, and printouts (but not including display media)
onto which information is recorded, stored, or printed within an
information system.
SOURCE: FIPS 200; SP 800-53; CNSSI-4009
Media Sanitization – A general term referring to the actions taken to render data written on
media unrecoverable by both ordinary and extraordinary means.
SOURCE: SP 800-88
Memorandum of
Understanding/Agreement –
(MOU/A)
The actions taken to render data written on media unrecoverable by
both ordinary and extraordinary means.
SOURCE: CNSSI-4009
A document established between two or more parties to define their
respective responsibilities in accomplishing a particular goal or
mission. In this guide, an MOU/A defines the responsibilities of two
or more organizations in establishing, operating, and securing a
system interconnection.
SOURCE: SP 800-47
A document established between two or more parties to define their
respective responsibilities in accomplishing a particular goal or
mission, e.g., establishing, operating, and securing a system
interconnection.
SOURCE: CNSSI-4009
Memory Scavenging – The collection of residual information from data storage.
SOURCE: CNSSI-4009
Message Authentication Code –
(MAC)
Message Authentication Code –
(MAC)
A cryptographic checksum on data that uses a symmetric key to
detect both accidental and intentional modifications of the data.
SOURCE: SP 800-63; FIPS 201
A cryptographic checksum that results from passing data through a
message authentication algorithm.
SOURCE: FIPS 198
Pg 118