NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Enterprise Risk Management – The methods and processes used by an enterprise to manage risks to
its mission and to establish the trust necessary for the enterprise to
support shared missions. It involves the identification of mission
dependencies on enterprise capabilities, the identification and
prioritization of risks due to defined threats, the implementation of
countermeasures to provide both a static risk posture and an effective
dynamic response to active threats; and it assesses enterprise
performance against threats and adjusts countermeasures as
necessary.
SOURCE: CNSSI-4009
Enterprise Service – A set of one or more computer applications and middleware systems
hosted on computer hardware that provides standard information
systems capabilities to end users and hosted mission applications and
services.
SOURCE: CNSSI-4009
Entity – Either a subject (an active element that operates on information or the
system state) or an object (a passive element that contains or receives
information).
SOURCE: SP 800-27
Entity – An active element in an open system.
SOURCE: FIPS 188
Entity – Any participant in an authentication exchange; such a participant may
be human or nonhuman, and may take the role of a claimant and/or
verifier.
SOURCE: FIPS 196
Entrapment – Deliberate planting of apparent flaws in an IS for the purpose of
detecting attempted penetrations.
SOURCE: CNSSI-4009
Entropy – A measure of the amount of uncertainty that an attacker faces to
determine the value of a secret.
SOURCE: SP 800-63
Environment – Aggregate of external procedures, conditions, and objects affecting
the development, operation, and maintenance of an information
system.
SOURCE: FIPS 200; CNSSI-4009
Environment of Operation – The physical surroundings in which an information system
processes, stores, and transmits information.
SOURCE: SP 800-37; SP 800-53A
Pg 70