Concept of operations

{
  "id": "MLC-T-CYB-000854",
  "term": "Concept of operations",
  "field": "Cybersecurity",
  "definition": "1. Verbal and graphic statement, in broad outline, of an organization’s assumptions or intent in regard to an operation or series of operations of new, modified, or existing organizational systems.\n\n2. Verbal and graphic statement of an organization’s assumptions or intent in regard to an operation or series of operations of a specific system or a related set of specific new, existing, or modified systems.\n\n3. See security concept of operations.\n\n4. A security-focused description of a system, its operational policies, classes of users, interactions between the system and its users, and the system’s contribution to the operational mission.\nNote 1: The security concept of operations may address security for other life cycle concepts associated with the deployed system. These include, for example, concepts for sustainment, logistics, maintenance, and training.\nNote 2: Security concept of operations is not the same as concept for secure function. Concept for secure function addresses the design philosophy for the system and is intended to achieve a system that is able to be used in a trustworthy secure manner. The security concept of operations must be consistent with the concept for secure function.",
  "abbreviation": "CONOP",
  "synonyms": [
    "CONOPS",
    "operational concept",
    "security concept of operations"
  ],
  "references": [
    "NIST SP 800-160v1r1 from ANSI/AIAA G-043B-2018",
    "CNSSI 4009-2015",
    "NIST SP 800-160 Vol. 1 from CNSSI 4009 (Adapted)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/concept-of-operations/"
}