A product that is commercially available.
Source(s):
NIST SP 800-152
under COTS product
Software and hardware that already exists and is available from commercial sources. It is also referred to as off-the-shelf.
Source(s):
NISTIR 7622
under Commercial off-the-shelf
from
NIST SP 800-64 Rev. 2