security control baseline

{
  "id": "MLC-T-CYB-003796",
  "term": "security control baseline",
  "field": "Cybersecurity",
  "definition": "1. The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system.\n\n2. The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system.\nA set of information security controls that has been established through information security strategic planning activities to address one or more specified security categorizations; this set of security controls is intended to be the initial security control set selected for a specific system once that system’s security categorization is determined.\n\n3. One of the sets of minimum security controls defined for federal information systems in NIST Special Publication 800-53 and CNSS Instruction 1253.\n\n4. The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system that provides a starting point for the tailoring process.\n\n5. The set of minimum security controls defined for a low-impact, moderate- impact, or high-impact information system.\n\n6. The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system. See also control baseline.",
  "see_also": [
    "control baseline"
  ],
  "references": [
    "FIPS 200; NIST SP 800-18 Rev. 1 [Superseded]; NIST SP 800-39 from CNSSI 4009; NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53B from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016)",
    "NIST SP 800-30 Rev. 1 from CNSSI 4009, CNSSI 1253",
    "NIST SP 800-137 from FIPS 200 (Adapted); NIST SP 800-53A Rev. 4 [Superseded] from FIPS 200 (Adapted)",
    "NIST SP 800-53 Rev. 4 [Superseded] from FIPS 200 (Adapted)",
    "CNSSI 4009-2015 from FIPS 200",
    "NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-control-baseline/"
}