U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Glossary
A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  J  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X  |  Y  |  Z

assurance case

Definition(s):

  A structured set of arguments and a body of evidence showing that an information system satisfies specific claims with respect to a given quality attribute.
Source(s):
CNSSI 4009-2015 from NIST SP 800-39, NIST SP 800-53 Rev. 4
NIST SP 800-137 under Assurance Case from NISTIR 7298
NIST SP 800-39 under Assurance Case from Software Engineering Institute, Carnegie Mellon University
NIST SP 800-53 Rev. 4 under Assurance Case from Software Engineering Institute, Carnegie Mellon University
NIST SP 800-53A Rev. 4 under Assurance Case from Software Engineering Institute, Carnegie Mellon University

  A reasoned, auditable artifact created that supports the contention that its top-level claim (or set of claims), is satisfied, including systematic argumentation and its underlying evidence and explicit assumptions that support the claim(s).
Source(s):
NIST SP 800-160 Vol. 1 from ISO/IEC 15026