configuration

{
  "id": "MLC-T-CYB-000873",
  "term": "configuration",
  "field": "Cybersecurity",
  "definition": "1. A collection of an item's descriptive and governing characteristics, which can be expressed in functional terms - i.e., what performance the item is expected to achieve - and in physical terms - i.e., what the item should look like and consist of when it is built. Represents the requirements, design, and implementation that define a particular version of a system or system component.\n\n2. Step in system design; for example, selecting functional units, assigning their locations, and defining their interconnections.\n\n3. The possible conditions, parameters, and specifications with which an information system or system component can be described or arranged.\n\n4. The possible conditions, parameters, and specifications with which an information system or system component can be described or arranged. The Device Configuration capability does not define which configuration settings should exist, simply that a mechanism to manage configuration settings exists.\n\n5. The selection of one of the sets of possible combinations of features of a system.\n\n6. “The possible conditions, parameters, and specifications with which an information system or system component can be described or arranged.” The Device Configuration capability does not define which configuration settings should exist, simply that a mechanism to manage configuration settings exists.",
  "references": [
    "CNSSI 4009-2022 from DAU Glossary",
    "NIST SP 800-82r3",
    "NIST SP 1800-27C from NIST SP 800-128; NIST SP 800-128; NIST SP 800-128",
    "NIST SP 800-213 from NIST SP 800-128 (Adapted); NISTIR 8259B from IoT Safety Architecture and Risk Toolkit v4.0 (Adapted)",
    "NISTIR 5153",
    "NISTIR 8259A from NIST SP 800-128",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/configuration/"
}