ISO

{
  "id": "MLC-T-CYB-002262",
  "term": "ISO",
  "field": "Cybersecurity",
  "definition": "1. Note: Organizations subordinate to federal agencies may use the term Senior Information Security Officer or Chief Information Security Officer to denote individuals filling positions with similar responsibilities to Senior Agency Information Security Officers.\n\n2. Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions.\n[Note: The terms “continuous” and “ongoing” in this context mean that security controls and organizational risks are assessed and analyzed at a frequency sufficient to support risk-based security decisions to adequately protect organization information.]",
  "expansions": [
    "International Organization for Standardization",
    "Information Security Continuous Monitoring (ISCM)",
    "Information Security Officer",
    "Information System Owner",
    "International Standards Organization"
  ],
  "references": [
    "NIST SP 800-53 Rev. 4 [Superseded] from 44 U.S.C., Sec. 3544",
    "NIST SP 800-137",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/iso/"
}