Security Control Assessor (SCA) - Glossary | CSRC

You are viewing this page in an unauthorized frame window.

This is a potential security issue, you are being redirected to https://csrc.nist.gov.

Official websites use .govA .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPSA lock ( Lock Locked padlock icon ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Search CSRC MENU Search Search

• Projects
• Publications Expand or Collapse

  Drafts for Public Comment

  All Public Drafts

  Final Pubs

  FIPS (standards)

  Special Publications (SPs)

  IR (interagency/internal reports)

  CSWP (cybersecurity white papers)

  ITL Bulletins

  Project Descriptions

  Journal Articles

  Conference Papers

  Books

• Topics Expand or Collapse

  Security & Privacy

  Applications

  Technologies

  Sectors

  Laws & Regulations

  Activities & Products

• News & Updates
• Events
• Glossary
• About CSRC Expand or Collapse

  Computer Security Division

  • Cryptographic Technology
  • Secure Systems and Applications
  • Security Components and Mechanisms
  • Security Engineering and Risk Management
  • Security Testing, Validation, and Measurement

  Applied Cybersecurity Division

  • Cybersecurity and Privacy Applications
  • National Cybersecurity Center of Excellence (NCCoE)
  • National Initiative for Cybersecurity Education (NICE)

  Contact Us

Information Technology Laboratory Computer Security Resource Center

• Projects
• Publications Expand or Collapse
  • Drafts for Public Comment
  • All Public Drafts
  • NIST Special Publications (SPs)
  • FIPS
  • NIST interagency/internal reports (NISTIRs)
  • ITL Bulletins
  • White Papers
  • Journal Articles
  • Conference Papers
  • Books
• Topics Expand or Collapse
  • Security & Privacy
  • Applications
  • Technologies
  • Sectors
  • Laws & Regulations
  • Activities & Products
• News & Updates
• Events
• Glossary
• About CSRC Expand or Collapse Computer Security Division
  • Cryptographic Technology
  • Secure Systems and Applications
  • Security Components and Mechanisms
  • Security Engineering and Risk Management
  • Security Testing, Validation, and Measurement
  Applied Cybersecurity Division
  • Cybersecurity and Privacy Applications
  • National Cybersecurity Center of Excellence (NCCoE)
  • National Initiative for Cybersecurity Education (NICE)
  Contact Us

Search Sort By Relevance (best match) Term (A-Z) Term (Z-A) Items Per Page 100 200 500 All Please fix the following: Search Reset

Glossary

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

security control assessor (SCA)

Share to Facebook Share to X Share to LinkedIn Share ia Email Abbreviations / Acronyms / Synonyms:

assessor show sources hide sources CNSSI 4009-2015, NIST SP 800-171Ar3, NIST SP 800-172A Assessor show sources hide sources NIST SP 800-137, NIST SP 800-30 Rev. 1, NIST SP 800-39, NIST SP 800-89 SCA show sources hide sources CNSSI 4009-2015

Definitions:

The individual, group, or organization responsible for conducting a security control assessment. Sources: CNSSI 4009-2015 NIST SP 800-137 under Security Control Assessor NIST SP 800-30 Rev. 1 under Security Control Assessor NIST SP 800-39 under Security Control Assessor See Security Control Assessor. Sources: NIST SP 800-137 under Assessor NIST SP 800-172 under assessor NIST SP 800-39 under Assessor The individual responsible for conducting assessment activities under the guidance and direction of a Designated Authorizing Official. The Assessor is a 3rd party. Sources: NIST SP 800-79-2 under Assessor The individual, group, or organization responsible for conducting a security or privacy assessment. Sources: NIST SP 800-37 Rev. 2 under assessor See security control assessor or risk assessor. Sources: CNSSI 4009-2015 under assessor from NIST SP 800-30 Rev. 1 NIST SP 800-30 Rev. 1 under Assessor The individual, group, or organization responsible for conducting a security or privacy control assessment. Sources: NIST SP 800-53 Rev. 5 under assessor The individual, group, or organization responsible for conducting a security or privacy control assessment. Sources: NIST SP 800-53A Rev. 5 under Assessor

About

See the identified Source document to understand each term-definition pair in its proper context.

Send inquiries about terminology to the Source's authors; NIST publications will usually include a contact email for that Source.

For other inquiries, such as comments about the Glossary's presentation and functionality, use this link.

See the Glossary homepage for more guidance.