- Vision: description of a better future state.
- Goal: statement of success criteria for fulfilling the vision.
- Objective: specific, measurable, achievable, realistic, and timely (SMART) description of the future state.
- Strategy: high-level approach or plan to achieve goals.
- Risk: “effect of uncertainty on objectives.” (ISO 31000)
- Opportunity: risk with positive effect.
- Threat: risk with negative effect.
- Probability: quantitative measure of uncertainty.
- Likelihood: qualitative measure of uncertainty.
- Control: means for risk treatment to prevent the situation from being out of control if a risk materializes.
- Problem: instance of an issue, incident, condition, or obstacle that hinders the fulfillment of objectives, goals, or vision.
- Value: anything of importance, significance, or use that can be measured qualitatively or quantitatively.
- Asset: anything of value and worthy of protection.
- Business value: the value generated by an organization or organizational unit.
- System: a “combination of interacting elements organized to achieve one or more stated purposes.” (ISO/TS 14812:2022)
- Analysis: process to get insights by dividing a complex or complicated thing into smaller, simple units.
- Evaluation: process to gather information or collect evidence to inform, support, and justify decisions.
- Operations: Operations: ongoing activities or daily routines to support the delivery of products and services.
- Configuration: the “manner in which the resources of an information processing system are organized and interconnected.” (ISO/IEC 20944-1:2013)
- Architecture: the artifact describing the principal elements and their relationship, interaction, and boundaries. Architecture is a crafted structure with a focus on the principal elements.
- Structure: the natural or crafted formation of a system describing the constituent elements and their relationship, interaction, and boundaries.
- Design: the documented solution, “the result of the design process” (ISO/IEC/IEEE15288:2015) that can meet stakeholders’ requirements. The design process typically starts with addressing architectural concerns or the so-called “architectural design.”
- Baseline: the “version of the approved set of one or more work products, items or elements that serves as a basis for change.” (ISO 26262-1:2018)
Note 1 to entry: See ISO 26262-8:2018, Clause 8.
Note 2 to entry: A baseline is typically placed under configuration management.
Note 3 to entry: A baseline is used as a basis for further development through the change management process during the lifecycle. - Change: “the transition from a current state to a future state.” (ACMP)
- Requirement: documented needs and expectations of stakeholders.
- Entity: anything with an identity.
- Identity: one or a set of attributes used to distinguish one entity from another uniquely.
- Authentication: the process of assuring a subject’s claimed identity is genuine by verifying its authenticator.
- Authorization
- Accounting
- Testing: process for a tester to exercise the system under test (SUT) or target of evaluation (TOE) and evaluate if the actual outcome matches his expected outcome.
- Engineering
- Assurance
- Management: a systematic approach (e.g., PDCA) to achieving objectives.
- Governance: a systematic approach (e.g., Evaluate, Direct, and Monitor by ISO 27014) for the highest organizational level of authority (e.g., state governor) to achieve the organization’s objectives.
- Security: assured state achieved by implementing controls to protect assets from risk to achieve objectives.
WUSON Glossary
Reply