Glossary

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Glossary terms and definitions last updated: October 25, 2024

This Glossary is an aggregation of terms and definitions specified in NIST's cybersecurity and privacy standards, guidelines, and other technical publications, and in CNSSI 4009. These should not be viewed as "official" or "preferred" definitions for a particular subject area, sector, or industry, with the exception that some definitions are cited directly from U.S. laws, the Code of Federal Regulations, Presidential Directives, etc.

Each term-definition pair must be understood within the context of its Source document, to which readers should refer. Because of this, many terms have multiple, varying definitions that reflect the different contexts of various publications written at different times.

Cite the source publication, not this website. As our documents are published and withdrawn, the terminology on these web pages will change. When citing terms and definitions, we encourage you to cite the source publication for the authoritative terminology and to understand it in its proper context. Many terms on this website have different definitions, from multiple publications.
Inclusive language. Some existing NIST publications may contain potentially biased or confusing terminology. As we develop and revise publications, we follow NIST's inclusive language guidance.
Public input. We invite public comments—including terminology suggestions—on our draft publications and welcome your contributions.
Artificial Intelligence (AI) terminology. For AI-focused terminology, see the Glossary available from the NIST Trustworthy & Responsible AI Resource Center.

For more background about this Glossary, see NISTIR 7298 Rev. 3.
Download the Glossary in JSON format (updated daily at 6:15 pm ET; see metadata).

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Showing 1205 matching records.

.csv

C#j

C&A

C&S

C*n

C, CU, CV

C.F.D.

C.F.R.

C1,…,C64

C3I

CA Technologies

CAA

CaaS

CableLabs

CAC

CAD

CAE

CAESAR

CAESARS

CAG

CAIS

CAK

calibration

call back

Call Detail Record

Call Oriented Programming

Call Processor

callibration

CAN

Canadian Centre for Cyber Security

Canadian Standards Association

Candidate Checklist

Candidate for Deletion

canister (COMSEC)

CAP

Capabilities Catalog

capability

Capability Bases Access Control

Capability Hardware Enhanced RISC Instructions

Capability List

Capability Maturity Model Integration

capability requirement

Capability, Anomalous Event Detection Management

Capability, Anomalous Event Response and Recovery Management

Capability, Behavior Management

Capability, Boundary Management

Capability, Configuration Settings Management

Capability, Credentials and Authentication Management

Capability, Event Preparation Management

Capability, Hardware Asset Management

Capability, ISCM

Capability, Manage and Assess Risk

Capability, Perform Resilient Systems Engineering

Capability, Privilege and Account Management

Capability, Security

Capability, Software Asset Management

Capability, Trust Management

Capability, Vulnerability Management

Capacity Planning

CAPCO

CAPEC

CapEx

CAPI

Capital Expenditures

Capstone Policies

CAPTCHA

Capture

CAPWAP

card

Card Application

Card Authentication Key

Card Capability Container

Card Design Standard

Card Holder Unique Identifier

Card Management

card management system

Card Not Present

card reader

Card Verifiable

Card Verifiable Certificate

Card Management System to Card

cardholder

Cardholder to Card

Cardholder to External System

Cardholder Unique Identifier

Career and Technical Education

Career and Technical Student Organization

Carrier Grade NAT

CAS

CASB

Cascaded Style Sheet

cascading

CASSA

catalog

categorization