Security impact analysis

{
  "id": "MLC-T-CYB-003816",
  "term": "Security impact analysis",
  "field": "Cybersecurity",
  "definition": "1. The analysis conducted by an organizational official to determine the extent to which a change to an information system has affected the security state of that system.\n\n2. The analysis conducted by an organizational official to determine the extent to which a change to the information system have affected the security state of the system.\n\n3. The analysis conducted by an organizational official to determine the extent to which a change to the information system has or may have affected the security posture of the system.\n\n4. The analysis conducted by qualified staff within an organization to determine the extent to which changes to the system affect the security posture of the system.",
  "abbreviation": "SIA",
  "references": [
    "CNSSI 4009-2022 from NIST SP 800-128 (adapted); NIST SP 800-137; NIST SP 800-30 Rev. 1; NIST SP 800-39",
    "NIST SP 800-128 from CNSSI 4009-2022 (Adapted)",
    "NIST SP 800-128",
    "NIST SP 800-53 Rev. 5 from NIST SP 800-128",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-impact-analysis/"
}