allocation

{
  "id": "MLC-T-CYB-000139",
  "term": "allocation",
  "field": "Cybersecurity",
  "definition": "1. The process an organization employs to determine whether security controls are defined as system-specific, hybrid, or common.\n\n2. The process an organization employs to determine whether security controls are defined as system-specific, hybrid, or common.\nThe process an organization employs to assign security controls to specific information system components responsible for providing a particular security capability (e.g., router, server, remote sensor).\n\n3. The process an organization employs to assign security or privacy requirements to an information system or its environment of operation; or to assign controls to specific system elements responsible for providing a security or privacy capability (e.g., router, server, remote sensor).",
  "references": [
    "CNSSI 4009-2022",
    "NIST SP 800-137",
    "NIST SP 800-37 Rev. 2",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/allocation/"
}