Assurance case

{
  "id": "MLC-T-CYB-000258",
  "term": "Assurance case",
  "field": "Cybersecurity",
  "definition": "1. A structured set of arguments and a body of evidence showing that a system satisfies specific claims with respect to a given quality attribute.\n\n2. A structured set of arguments and a body of evidence showing that an information system satisfies specific claims with respect to a given quality attribute.\n\n3. A reasoned, auditable artifact created that supports the contention that its top-level claim (or set of claims), is satisfied, including systematic argumentation and its underlying evidence and explicit assumptions that support the claim(s).",
  "references": [
    "NIST SP 800-53A Rev. 5 from SEI Arguing Security",
    "CNSSI 4009-2015 from NIST SP 800-39, NIST SP 800-53 Rev. 4; NIST SP 800-137 from NISTIR 7298; NIST SP 800-39 from Software Engineering Institute, Carnegie Mellon University; NIST SP 800-53 Rev. 4 [Superseded] from Software Engineering Institute, Carnegie Mellon University; NIST SP 800-53A Rev. 4 [Superseded] from Software Engineering Institute, Carnegie Mellon University",
    "NIST SP 800-160 Vol. 1 from ISO/IEC 15026; NIST SP 800-160v1r1 from ISO/IEC 15026-1:2019",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/assurance-case/"
}