The protection of sensitive information from unauthorized disclosure and sensitive facilities from physical, technical or electronic penetration or exploitation. Configuration control Process of controlling modifications to hardware, software, firmware, and documentation to ensure that an IS is protected against improper modification before, during, and after system implementation. Configuration management Management of security features and assurances through control of changes made to hardware, software, firmware, documentation, test, test fixtures, and test documentation throughout the life cycle of an IS . Contingency plan Plan maintained for emergency response, backup operations, and post-disaster recovery for an IS , to ensure availability of critical resources and facilitate the continuity of operations in an emergency. A statement of the desired result or purpose to be achieved by implementing control procedures in a particular IT activity.
Crisis management is predominantly a law enforcement response.
Based on the situation, a Federal crisis management response may be supported by technical operations, and by Federal consequence management, which may operate concurrently. Critical infrastructure Physical or cyber-based system essential to the minimum operations of the economy and government. CRL C ertificate R evocation L ist Cryptography Science of encrypting plain data and information into a form intelligible only to authorized persons who are able to decrypt it. I ncidence R esponse C apability Cyberattack Exploitation of the software vulnerabilities of information technology-based control components. Cyberspace Describes the world of connected computers and the society that surrounds them.