Chain of trust

{
  "id": "MLC-T-CYB-000628",
  "term": "Chain of trust",
  "field": "Cybersecurity",
  "definition": "1. An interoperable data format for PIV enrollment records that facilitates the import and export of records between PIV Card issuers.\n\n2. A method for maintaining valid trust boundaries by applying a principle of transitive trust, where each software module in a system boot process is required to measure the next module before transitioning control.\n\n3. See “authentication chain.”\n\n4. A certain level of trust in supply chain interactions such that each participant in the consumer-provider relationship provides adequate protection for its component products, systems, and services.",
  "abbreviation": "CoT",
  "synonyms": [
    "authentication chain"
  ],
  "references": [
    "FIPS 201-3",
    "NISTIR 8320",
    "NIST SP 800-81-2 [Superseded]",
    "NIST SP 800-37 Rev. 2",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/chain-of-trust/"
}