Software and hardware that already exists and is available from commercial sources. It is also referred to as off-the-shelf.
Source(s):
NISTIR 7622
under Commercial off-the-shelf
from
NIST SP 800-64 Rev. 2
NIST SP 800-161
[Superseded]
under Commercial off-the-shelf (COTS)
from
NIST SP 800-64 Rev. 2
Hardware and software IT products that are ready-made and available for purchase by the general public.
Source(s):
NISTIR 7711
under Commercial-Off-The-Shelf
A software and/or hardware product that is commercially ready-made and available for sale, lease, or license to the general public.
Source(s):
CNSSI 4009-2015
[Superseded]
from
NSA/CSS Policy 3-14