NIST SP 800-39FPD Appendix C

APPENDIX C

ACRONYMS

COMMON ABBREVIATIONS

APT

Advanced Persistent Threat

CIO

Chief Information Officer

CNSS

Committee on National Security Systems

COTS

Commercial Off-The-Shelf

DoD

Department of Defense

FIPS

Federal Information Processing Standards

FISMA

Federal Information Security Management Act

IA

Information Assurance

ICS

Industrial Control System

IEC

International Electrotechnical Commission

ISO

International Organization for Standardization

NIST

National Institute of Standards and Technology

NSA

National Security Agency

ODNI

Office of the Director of National Intelligence

OMB

Office of Management and Budget

POAM

Plan of Action and Milestones

RMF

Risk Management Framework

SCAP

Security Content Automation Protocol

SDLC

System Development Life Cycle

SP

Special Publication

TTP

Tactic Technique Procedure

U.S.C.

United States Code

Sources

• NIST SP 800-39 DRAFT Integrated Enterprise-Wide Risk Management: Organization, Mission, and Information System View, Final Public Draft (PDF)