Tailoring

The process by which a security control baseline is modified based on: the application of scoping guidance, the specification of compensating security controls, if needed, and the specification of organization-defined parameters in the security controls via explicit assignment and selection statements.


Tailoring

The process by which a security control baseline is modified based on: the application of scoping guidance, the specification of compensating security controls, if needed, and the specification of organization-defined parameters in the security controls via explicit assignment and selection statements.

Used in methodology