An assessment object that includes specific protection related pursuits or actions supporting an information system that involve people (e.g., conducting system backup operations, monitoring network traffic).
Source(s):
CNSSI 4009-2015
under activities (assessment)
from
NIST SP 800-53A Rev. 1
An assessment object that includes specific protection-related pursuits or actions supporting an information system that involve people (e.g., conducting system backup operations, monitoring network traffic).
Source(s):
NIST SP 800-137
from
NISTIR 7298
NIST SP 800-53A Rev. 4