NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Clearing – Removal of data from an information system, its storage devices, and
other peripheral devices with storage capacity, in such a way that the
data may not be reconstructed using common system capabilities
(i.e., through the keyboard); however, the data may be reconstructed
using laboratory methods.
SOURCE: CNSSI-4009
Client – Individual or process acting on behalf of an individual who makes
requests of a guard or dedicated server. The client’s requests to the
guard or dedicated server can involve data transfer to, from, or
through the guard or dedicated server.
SOURCE: CNSSI-4009
Client (Application) – A system entity, usually a computer process acting on behalf of a
human user, that makes use of a service provided by a server.
SOURCE: SP 800-32
Clinger-Cohen Act of 1996 – Also known as Information Technology Management Reform Act. A
statute that substantially revised the way that IT resources are
managed and procured, including a requirement that each agency
design and implement a process for maximizing the value and
assessing and managing the risks of IT investments.
SOURCE: SP 800-64
Closed Security Environment – Environment providing sufficient assurance that applications and
equipment are protected against the introduction of malicious logic
during an information system life cycle. Closed security is based
upon a system's developers, operators, and maintenance personnel
having sufficient clearances, authorization, and configuration control.
SOURCE: CNSSI-4009
Closed Storage – Storage of classified information within an accredited facility, in
General Services Administration-approved secure containers, while
the facility is unoccupied by authorized personnel.
SOURCE: CNSSI-4009
Pg 34