countermeasures

{
  "id": "MLC-T-CYB-000982",
  "term": "countermeasures",
  "field": "Cybersecurity",
  "definition": "1. Any action, device, procedure, technique, or other measure that reduces the vulnerability of or threat to a system.\n\n2. Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system.\n\n3. Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system. Safeguards may include security features, management constraints, personnel security, and security of physical structures, areas, and devices.\n\n4. Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system. Synonymous with security controls and safeguards.\n\n5. Protective measures prescribed to meet the security objectives (i.e., confidentiality, integrity, and availability) specified for an information system. Safeguards may include security features, management controls, personnel security, and security of physical structures, areas, and devices. Synonymous with security controls and countermeasures.\n\n6. The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its information.\n\n7. A safeguard or countermeasure prescribed for an information system or an organization designed to protect the confidentiality, integrity, and availability of its information and to meet a set of defined security requirements.\n\n8. The protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system. Safeguards may include security features, management constraints, personnel security, and security of physical structures, areas, and devices. Synonymous with security controls and countermeasures.\n\n9. The safeguards or countermeasures prescribed for an information system or an organization to protect the confidentiality, integrity, and availability of the system and its information.\n\n10. Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of a system. Synonymous with security controls and safeguards.",
  "synonyms": [
    "safeguards",
    "security controls"
  ],
  "references": [
    "CNSSI 4009-2022 from NCSC-TG-004-88",
    "FIPS 200 from CNSSI 4009",
    "FIPS 200 from CNSSI 4009 (Adapted)",
    "CNSSI 4009-2015 from NIST SP 800-37 Rev. 1, FIPS 200; NIST SP 800-137 from CNSSI 4009; NIST SP 800-18 Rev. 1 [Superseded] from CNSSI 4009; NIST SP 800-37 Rev. 1 [Superseded] from CNSSI 4009; NIST SP 800-53 Rev. 4 [Superseded] from CNSSI 4009",
    "NIST SP 800-128 from CNSSI 4009-2015 (Adapted), CNSSI 4009-2022 (Adapted)",
    "CNSSI 4009-2015 from FIPS 199; NIST SP 800-82r3 from FIPS 199",
    "NIST SP 800-137A from NIST SP 800-53 Rev. 4",
    "CNSSI 4009-2015 from FIPS 200",
    "NIST SP 800-160 Vol. 2 [Superseded] from OMB Circular A-130; NIST SP 800-160 Vol. 2 Rev. 1 from OMB Circular A-130 (2016)",
    "NIST SP 800-37 Rev. 2 from FIPS 200; NIST SP 800-53 Rev. 5 from FIPS 200; NIST SP 800-53A Rev. 5 from FIPS 200",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/countermeasures/"
}