NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Chief Information Officer (CIO) –
Chief Information Security Officer –
(CISO)
Agency official responsible for:
1) Providing advice and other assistance to the head of the executive
agency and other senior management personnel of the agency to
ensure that information technology is acquired and information
resources are managed in a manner that is consistent with laws,
Executive Orders, directives, policies, regulations, and priorities
established by the head of the agency;
2) Developing, maintaining, and facilitating the implementation of a
sound and integrated information technology architecture for the
agency; and
3) Promoting the effective and efficient design and operation of all
major information resources management processes for the
agency, including improvements to work processes of the agency.
SOURCE: FIPS 200; Public Law 104-106, Sec. 5125(b)
Agency official responsible for: 1) providing advice and other
assistance to the head of the executive agency and other senior
management personnel of the agency to ensure that information
systems are acquired and information resources are managed in a
manner that is consistent with laws, Executive Orders, directives,
policies, regulations, and priorities established by the head of the
agency; 2) developing, maintaining, and facilitating the
implementation of a sound and integrated information system
architecture for the agency; and 3) promoting the effective and
efficient design and operation of all major information resources
management processes for the agency, including improvements to
work processes of the agency.
Note: Organizations subordinate to federal agencies may use the
term Chief Information Officer to denote individuals filling positions
with similar security responsibilities to agency-level Chief
Information Officers.
SOURCE: CNSSI-4009; SP 800-53
See Senior Agency Information Security Officer.
Cipher – Series of transformations that converts plaintext to ciphertext using
the Cipher Key.
SOURCE: FIPS 197
Any cryptographic system in which arbitrary symbols or groups of
symbols, represent units of plain text, or in which units of plain text
are rearranged, or both.
SOURCE: CNSSI-4009
Pg 31