[In INFOSEC, the] degree of security as determined by evaluation of the totality of all system elements and INFOSEC countermeasures. [INFOSEC-99]

The effort to achieve and maintain optimal security and survivability of a system throughout its life cycle. [INFOSEC-99]

Risk assessment of a system, considering its vulnerabilities and perceived security threat. [INFOSEC-99]

The person responsible to the System Manager for writing, enforcing and reviewing Security Operating Procedures (SyOPs) [CESG].

1. The set of laws, rules and practices that regulate how sensitive information and other resources are managed, protected and distributed within a specific system [ITSEC].
2. [CESG]. A statement by a System Manager/Project Manager defining a system, its Security Requirement, the security measures to be enforced and the allocation of responsibilities for enforcing them. [CESG].
Note: When an SEISP… (Read More →)

Firmware and software that provide an aggregation of network element functions into a higher level function; provide an interface to the data contained in the system [POSIX.0].

An interface providing access to services associated with the application's internal resources [POSIX.0].

In transmission systems, any scheme used to provide such functions as system control, addressing, routing, error detection and correction, level control, priority, traffic control, message accountability, and/or other required overhead information.

1. Application-independent software that supports the running of application software.
2. Application-independent software that supports the running of application software and manages the resources of the application platform [POSIX.0].

In the military community, the system-specific characteristics, not dictated by the individual components' electrical performance characteristics, but necessary in order to permit internal and external interoperability.