organization-defined parameter

{
  "id": "MLC-T-CYB-002988",
  "term": "organization-defined parameter",
  "field": "Cybersecurity",
  "definition": "1. The variable part of a control or control enhancement that is instantiated by an organization during the tailoring process by either assigning an organization-defined value or selecting a value from a predefined list provided as part of the control or control enhancement.\n\n2. See assignment operation and selection operation.\n\n3. The variable part of a security requirement that is instantiated by an organization during the tailoring process by assigning an organization-defined value as part of the requirement.",
  "abbreviation": "ODP",
  "references": [
    "NIST SP 800-53A Rev. 5",
    "NIST SP 800-171r3 from NIST SP 800-53 Rev. 5 (adapted)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/organization-defined-parameter/"
}