U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Glossary
A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  J  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X  |  Y  |  Z

Policy

Definition(s):

  Statements, rules or assertions that specify the correct or expected behavior of an entity. For example, an authorization policy might specify the correct access control rules for a software component.
Source(s):
NIST SP 800-95 from Open Grid Services Architecture Glossary of Terms
NISTIR 7621 Rev. 1 from NIST SP 800-95

  Statements, rules, or assertions that specify the correct or expected behavior of an entity. For example, an authorization policy might specify the correct access control rules for a software component.
Source(s):
NIST SP 1800-15B from NIST SP 800-95, NISTIR 7621 Rev. 1
NIST SP 1800-15C from NIST SP 800-95, NISTIR 7621 Rev. 1

  A statement of objectives, rules, practices or regulations governing the activities of people within a certain context.
Source(s):
NISTIR 4734