NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Communications Security –
(COMSEC)
A component of Information Assurance that deals with measures and
controls taken to deny unauthorized persons information derived
from telecommunications and to ensure the authenticity of such
telecommunications. COMSEC includes crypto security,
transmission security, emissions security, and physical security of
COMSEC material.
SOURCE: CNSSI-4009
Community of Interest (COI) – A collaborative group of users who exchange information in pursuit
of their shared goals, interests, missions, or business processes, and
who therefore must have a shared vocabulary for the information
they exchange. The group exchanges information within and
between systems to include security domains.
SOURCE: CNSSI-4009
Community Risk – Probability that a particular vulnerability will be exploited within an
interacting population and adversely impact some members of that
population.
SOURCE: CNSSI-4009
Comparison – The process of comparing a biometric with a previously stored
reference.
SOURCE: FIPS 201
Compartmentalization – A nonhierarchical grouping of sensitive information used to control
access to data more finely than with hierarchical security
classification alone.
SOURCE: CNSSI-4009
Compartmented Mode – Mode of operation wherein each user with direct or indirect access to
a system, its peripherals, remote terminals, or remote hosts has all of
the following: (1) valid security clearance for the most restricted
information processed in the system; (2) formal access approval and
signed nondisclosure agreements for that information which a user is
to have access; and (3) valid need-to-know for information which a
user is to have access.
SOURCE: CNSSI-4009
Pg 38