A measure of the security of a trusted function, or a set of trusted functions, as calculated by a competent authority [CESG].
Note: For HMG purposes, the Head of the Certification Body of the UK Scheme is the "competent authority". See also: Assurance, Confidence Level .

A measure of confidence as described in CESG Computer Security Memorandum No.3 - "UK Systems Security Confidence Levels" [CESG].
Note: ITSEC uses the term "assurance" rather than "confidence".

1. Of classified or sensitive data, the degree to which the data have not been compromised; i.e., have not been made available or disclosed to unauthorized individuals, processes, or other entities. [After 2382-pt.8]
2. Assurance that information is not disclosed to unauthorized persons, processes, or devices. [INFOSEC-99]
3. A property by which information relating to an entity or party is… (Read More →)

1. In a communications or computer system, an arrangement of functional units according to their nature, number, and chief characteristics.
Note 1: Configuration pertains to hardware, software, firmware, and documentation.
Note 2: The configuration will affect system performance.
2. Selection of one of the sets of possible combinations of features of a system[FC Ver
1. 0 Dec 1992].
3. The… (Read More →)

Documentation that formally defines the configuration items of a system [CESG].

1. After establishing a configuration, such as that of a telecommunications or computer system, the evaluating and approving changes to the configuration and to the interrelationships among system components.
2. In distributed-queue dual-bus (DQDB) networks, the function that ensures the resources of all nodes of a DQDB network are configured into a correct dual-bus topology.
Note: The functions that are… (Read More →)

A measure of the security of a trusted function, or a set of trusted functions, as calculated by a competent authority [CESG].
Note: For HMG purposes, the Head of the Certification Body of the UK Scheme is the "competent authority". See also: Assurance, Confidence Level .

1. [The] management of security features and assurances through control of changes made to hardware, software, firmware, documentation, test, test fixtures, and test documentation throughout the life cycle of an information system (IS). [INFOSEC-99]
2. The control of changes--including the recording thereof--that are made to the hardware, software, firmware, and documentation throughout the system life cycle.
3. The procedure by… (Read More →)

Group of people responsible for the management of changes to a system, to include assessment of their impact on security.
Note: The certifier should be represented on the Configuration Management Board for a certified system [CESG].

The prevention of information flow [CESG].