SCA

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

We are building a provable archive!
A lock ( Dot gov ) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Abbreviation(s) and Synonym(s):

Security Control Assessor

CNSSI 4009-2015

software composition analysis

NIST SP 800-204C

SRxCryptoAPI

NIST TN 2060

Definition(s):

The individual, group, or organization responsible for conducting a security control assessment.
Source(s):
NIST SP 800-137 under Security Control Assessor
NIST SP 800-30 Rev. 1 under Security Control Assessor
NIST SP 800-39 under Security Control Assessor

Glossary Comments

Comments about specific definitions should be sent to the authors of the linked Source publication. For NIST publications, an email is usually found within the document.

Comments about the glossary's presentation and functionality should be sent to secglossary@nist.gov.

See NISTIR 7298 Rev. 3 for additional details.