NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
COMSEC Account – Administrative entity, identified by an account number, used to
maintain accountability, custody, and control of COMSEC material.
SOURCE: CNSSI-4009
COMSEC Account Audit – Examination of the holdings, records, and procedures of a COMSEC
account ensuring all accountable COMSEC material is properly
handled and safeguarded.
SOURCE: CNSSI-4009
COMSEC Aid – COMSEC material that assists in securing telecommunications and is
required in the production, operation, or maintenance of COMSEC
systems and their components. COMSEC keying material,
callsign/frequency systems, and supporting documentation, such as
operating and maintenance manuals, are examples of COMSEC aids.
SOURCE: CNSSI-4009
COMSEC Assembly – Group of parts, elements, subassemblies, or circuits that are
removable items of COMSEC equipment.
SOURCE: CNSSI-4009
COMSEC Boundary – Definable perimeter encompassing all hardware, firmware, and
software components performing critical COMSEC functions, such
as key generation, handling, and storage.
SOURCE: CNSSI-4009
COMSEC Chip Set – Collection of NSA-approved microchips.
SOURCE: CNSSI-4009
COMSEC Control Program – Computer instructions or routines controlling or affecting the
externally performed functions of key generation, key distribution,
message encryption/decryption, or authentication.
SOURCE: CNSSI-4009
COMSEC Custodian –
Individual designated by proper authority to be responsible for the
receipt, transfer, accounting, safeguarding, and destruction of
COMSEC material assigned to a COMSEC account.
SOURCE: CNSSI-4009
COMSEC Demilitarization – Process of preparing COMSEC equipment for disposal by extracting
all CCI, classified, or cryptographic (CRYPTO) marked components
for their secure destruction, as well as defacing and disposing of the
remaining equipment hulk.
SOURCE: CNSSI-4009
Pg 42