security specification

{
  "id": "MLC-T-CYB-003849",
  "term": "security specification",
  "field": "Cybersecurity",
  "definition": "1. An assessment object that includes document-based artifacts (e.g., policies, procedures, plans, system security requirements, functional specifications, architectural designs) associated with a system.\n\n2. The requirements for the security-relevant portion of the system.\n\n3. An information item that identifies, in a complete, precise, verifiable manner, the requirements, design, behavior, or other expected characteristics of a system, service, or process.\n\n4. A document that specifies, in a complete, precise, verifiable manner, the requirements, design, behavior, or other characteristics of a system or component and often the procedures for determining whether these provisions have been satisfied. See specification requirement.\n\n5. A document that specifies, in a complete, precise, verifiable manner, the requirements, design, behavior, or other characteristics of a system or component and often the procedures for determining whether these provisions have been satisfied.\nRefer to security specification.\n\n6. The requirements for the security-relevant portion of the system.\nNote: The security specification may be provided as a separate document or may be captured with a broader specification.",
  "abbreviation": "specification",
  "references": [
    "NIST SP 800-53A Rev. 5",
    "NIST SP 800-160v1r1",
    "NIST SP 800-160v1r1 from ISO/IEC/IEEE 15289:2019",
    "NIST SP 800-37 Rev. 2 from IEEE 610.12-1990",
    "NIST SP 800-160 Vol. 1 from IEEE 610.12",
    "NIST SP 800-160 Vol. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-specification/"
}