provenance

{
  "id": "MLC-T-CYB-003344",
  "term": "provenance",
  "field": "Cybersecurity",
  "definition": "1. The chronology of the origin, development, ownership, location, and changes to a system or system component and associated data. It may also include personnel and processes used to interact with or make modifications to the system, component, or associated data.\n\n2. The chronology of the origin, development, ownership, location, and changes to a system or system component and associated data. It may also include the personnel and processes used to interact with or make modifications to the system, component, or associated data.\n\n3. Metadata pertaining to the origination or source of specified data.\n\n4. The records describing the possession of, and changes to, components, component processes, information, systems, organization, and organizational processes. Provenance enables all changes to the baselines of components, component processes, information, systems, organizations, and organizational processes, to be reported to specific actors, functions, locales, or activities.",
  "references": [
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update]; NIST SP 800-218 from NIST SP 800-53 Rev. 5; NIST SP 800-37 Rev. 2",
    "NIST SP 800-53 Rev. 5",
    "NIST SP 800-218A from NIST Privacy Framework Version 1.0; NIST Privacy Framework Version 1.0 from NISTIR 8112 (Adapted)",
    "NISTIR 7622",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/provenance/"
}