NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
External Information System Service
Provider –
A provider of external information system services to an organization
through a variety of consumer-producer relationships, including but
not limited to: joint ventures; business partnerships; outsourcing
arrangements (i.e., through contracts, interagency agreements, lines
of business arrangements); licensing agreements; and/or supply chain
exchanges.
SOURCE: SP 800-37; SP 800-53
External Network – A network not controlled by the organization.
SOURCE: SP 800-53; CNSSI-4009
External Security Testing – Security testing conducted from outside the organization’s security
perimeter.
SOURCE: SP 800-115
Extraction Resistance – Capability of crypto-equipment or secure telecommunications
equipment to resist efforts to extract key.
SOURCE: CNSSI-4009
Extranet – A private network that uses Web technology, permitting the sharing
of portions of an enterprise’s information or operations with
suppliers, vendors, partners, customers, or other enterprises.
SOURCE: CNSSI-4009
Fail Safe – Automatic protection of programs and/or processing systems when
hardware or software failure is detected.
SOURCE: CNSSI-4009
Fail Soft – Selective termination of affected nonessential processing when
hardware or software failure is determined to be imminent.
SOURCE: CNSSI-4009
Failover – The capability to switch over automatically (typically without human
intervention or warning) to a redundant or standby information
system upon the failure or abnormal termination of the previously
active system.
SOURCE: SP 800-53; CNSSI-4009
Failure Access – Type of incident in which unauthorized access to data results from
hardware or software failure.
SOURCE: CNSSI-4009
Failure Control – Methodology used to detect imminent hardware or software failure
and provide fail safe or fail soft recovery.
SOURCE: CNSSI-4009
Pg 73