NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Information Security Program Plan –
Formal document that provides an overview of the security
requirements for an organization-wide information security program
and describes the program management controls and common
controls in place or planned for meeting those requirements.
SOURCE: SP 800-37; SP 800-53; SP 800-53A
Information Sharing – The requirements for information sharing by an IT system with one
or more other IT systems or applications, for information sharing to
support multiple internal or external organizations, missions, or
public programs.
SOURCE: SP 800-16
Information Sharing Environment – 1. An approach that facilitates the sharing of terrorism and
homeland security information; or
2. ISE in its broader application enables those in a trusted partnership
to share, discover, and access controlled information.
SOURCE: CNSSI-4009
Information Steward –
Information System –
An agency official with statutory or operational authority for
specified information and responsibility for establishing the
controls for its generation, collection, processing, dissemination,
and disposal.
SOURCE: CNSSI-4009
Individual or group that helps to ensure the careful and
responsible management of federal information belonging to the
Nation as a whole, regardless of the entity or source that may
have originated, created, or compiled the information.
Information stewards provide maximum access to federal
information to elements of the federal government and its
customers, balanced by the obligation to protect the information
in accordance with the provisions of FISMA and any associated
security-related federal policies, directives, regulations, standards,
and guidance.
SOURCE: SP 800-37
A discrete set of information resources organized for the collection,
processing, maintenance, use, sharing, dissemination, or disposition
of information.
SOURCE: FIPS 200; FIPS 199; SP 800-53A; SP 800-37; SP 800-60;
SP 800-18; 44 U.S.C., Sec. 3502; OMB Circular A-130,
App. III
Pg 94