NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Principal Accrediting Authority –
(PAA)
Principal Certification Authority –
(CA)
Senior official with authority and responsibility for all intelligence
systems within an agency.
SOURCE: CNSSI-4009
The Principal Certification Authority is a CA designated by an
agency to interoperate with the FBCA. An agency may designate
multiple Principal CAs to interoperate with the FBCA.
SOURCE: SP 800-32
Print Suppression – Eliminating the display of characters in order to preserve their
secrecy.
SOURCE: CNSSI-4009
Privacy – Restricting access to subscriber or Relying Party information in
accordance with federal law and agency policy.
SOURCE: SP 800-32
Privacy Impact Assessment (PIA) –
An analysis of how information is handled: 1) to ensure handling
conforms to applicable legal, regulatory, and policy requirements
regarding privacy; 2) to determine the risks and effects of collecting,
maintaining, and disseminating information in identifiable form in an
electronic information system; and 3) to examine and evaluate
protections and alternative processes for handling information to
mitigate potential privacy risks.
SOURCE: SP 800-53; SP 800-18; SP 800-122; CNSSI-4009; OMB
Memorandum 03-22
Privacy System – Commercial encryption system that affords telecommunications
limited protection to deter a casual listener, but cannot withstand a
technically competent cryptanalytic attack.
SOURCE: CNSSI-4009
Private Key – The secret part of an asymmetric key pair that is typically used to
digitally sign or decrypt data.
SOURCE: SP 800-63
Pg 142