NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
An environment or context that includes a set of system resources
and a set of system entities that have the right to access the resources
as defined by a common security policy, security model, or security
architecture. See Security Domain.
SOURCE: CNSSI-4009; SP 800-53; SP 800-37
Drop Accountability – Procedure under which a COMSEC account custodian initially
receipts for COMSEC material, and provides no further accounting
for it to its central office of record. Local accountability of the
COMSEC material may continue to be required. See accounting
legend code.
SOURCE: CNSSI-4009
Dual-Use Certificate – A certificate that is intended for use with both digital signature and
data encryption services.
SOURCE: SP 800-32
Due Care – The responsibility that managers and their organizations have a duty
to provide for information security to ensure that the type of control,
the cost of control, and the deployment of control are appropriate for
the system being managed.
SOURCE: SP 800-30
Duplicate Digital Evidence – A duplicate is an accurate digital reproduction of all data objects
contained on the original physical item and associated media.
SOURCE: SP 800-72
Duration – A field within a certificate that is composed of two subfields; “date of
issue” and “date of next issue.”
SOURCE: SP 800-32
Dynamic Subsystem – A subsystem that is not continually present during the execution
phase of an information system. Service-oriented architectures
and cloud computing architectures are examples of architectures
that employ dynamic subsystems.
SOURCE: SP 800-37
E-Government (e-gov) – The use by the U.S. government of Web-based Internet applications
and other information technology.
SOURCE: CNSSI-4009
Pg 65