information security program plan

{
  "id": "MLC-T-CYB-002124",
  "term": "information security program plan",
  "field": "Cybersecurity",
  "definition": "1. Formal document that provides an overview of the security requirements for an organization-wide information security program and describes the program management controls and common controls in place or planned for meeting those requirements. [SP800-37] from [OMBA-130]\n\n2. Formal document that provides an overview of the security requirements for an organization-wide information security program and describes the program management controls and common controls in place or planned for meeting those requirements.",
  "see_also": [
    "privacy program plan",
    "security plan"
  ],
  "references": [
    "NIST SP 800-18r2 from NIST SP 800-37 Rev. 2 ((from OMB A-130))",
    "CNSSI 4009-2015 from NIST SP 800-37 Rev. 1; NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016); NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-137 from NISTIR 7298; NIST SP 800-30 Rev. 1 from NIST SP 800-53; NIST SP 800-37 Rev. 1 [Superseded]; NIST SP 800-39 from NIST SP 800-53; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-53A Rev. 4 [Superseded] from NIST SP 800-53; NIST SP 800-82 Rev. 2 [Superseded] from NIST SP 800-53; NIST SP 800-82r3 from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/information-security-program-plan/"
}