NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Potential Impact – The loss of confidentiality, integrity, or availability could be expected
to have:
1) a limited adverse effect (FIPS 199 low);
2) a serious adverse effect (FIPS 199 moderate); or
3) a severe or catastrophic adverse effect (FIPS 199 high) on
organizational operations, organizational assets, or individuals.
SOURCE: SP 800-53; SP 800-60; SP 800-37; FIPS 199
Potential Impact – The loss of confidentiality, integrity, or availability could be expected
to have a limited adverse effect; a serious adverse effect, or a severe
or catastrophic adverse effect on organizational operations,
organizational assets, or individuals.
SOURCE: FIPS 200
The loss of confidentiality, integrity, or availability that could be
expected to have a limited (low) adverse effect, a serious (moderate)
adverse effect, or a severe or catastrophic (high) adverse effect on
organizational operations, organizational assets, or individuals.
SOURCE: CNSSI-4009
Practice Statement – A formal statement of the practices followed by an authentication
entity (e.g., RA, CSP, or verifier); typically the specific steps taken to
register and verify identities, issue credentials, and authenticate
claimants.
SOURCE: SP 800-63
Precursor – A sign that an attacker may be preparing to cause an incident.
SOURCE: SP 800-61
A sign that an attacker may be preparing to cause an incident. See
indicator.
SOURCE: CNSSI-4009
Preproduction Model – Version of INFOSEC equipment employing standard parts and
suitable for complete evaluation of form, design, and performance.
Preproduction models are often referred to as beta models.
SOURCE: CNSSI-4009
Primary Services Node (PRSN) – A Key Management Infrastructure core node that provides the users’
central point of access to KMI products, services, and information.
SOURCE: CNSSI-4009
Principal – An entity whose identity can be authenticated.
SOURCE: FIPS 196
Pg 141