compromise

{
  "id": "MLC-T-CYB-000805",
  "term": "compromise",
  "field": "Cybersecurity",
  "definition": "1. A judgment, based on the preponderance of the evidence, that a disclosure of information to unauthorized persons or a violation of the security policy for a system in which unauthorized, intentional or unintentional disclosure, modification, destruction, or loss of an object has occurred.\n\n2. The disclosure of classified data to persons not authorized to receive that data.\n\n3. The unauthorized disclosure, modification or use of sensitive data (e.g., keying material and other security-related information).\n\n4. The unauthorized disclosure, modification, substitution, or use of sensitive data (e.g., keys, metadata, or other security-related information) or the unauthorized modification of a security-related system, device or process in order to gain unauthorized access.\n\n5. To reduce the trust associated with a key, its metadata, a system, device or process.\n\n6. Disclosure of information to unauthorized persons, or a violation of the security policy of a system in which unauthorized intentional or unintentional disclosure, modification, destruction, or loss of an object may have occurred.\n\n7. The unauthorized disclosure, modification, substitution or use of sensitive data (e.g., keying material and other security-related information).\n\n8. The unauthorized disclosure, modification, substitution, or use of sensitive data (e.g., keying material and other security related information).\n\n9. The unauthorized disclosure, modification, substitution, or use of sensitive information (e.g., a secret key, private key or secret metadata).\n\n10. The unauthorized disclosure, modification, substitution, or use of sensitive data (e.g., a secret key, private key, or secret metadata).\n\n11. The unauthorized disclosure, modification, substitution or use of sensitive key information (e.g., a secret key, private key, or secret metadata).\n\n12. The unauthorized disclosure, modification, or use of sensitive data (e.g., keying material and other security-related information).",
  "references": [
    "CNSSI 4009-2015 from NIST SP 800-32; CNSSI 4009-2022 from CNSSI 4003",
    "CNSSI 4009-2015 from NSA/CSS Manual Number 3-16 (COMSEC); CNSSI 4009-2022",
    "NIST SP 800-133 [Superseded]; NIST SP 800-133 Rev.1 [Superseded]",
    "NIST SP 800-152",
    "NIST SP 800-32 [Withdrawn]; NIST SP 1800-25B from NIST SP 800-32; NIST SP 1800-26B from NIST SP 800-32",
    "NIST SP 800-57 Part 1 Rev. 4 [Superseded]; NIST SP 800-57 Part 1 Rev. 3 [Superseded]",
    "NIST SP 800-57 Part 2 [Superseded]",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 800-175B Rev. 1",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-133 Rev. 2",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/compromise/"
}