Page:Executive Order 14144.pdf/16

(r) The term ‘‘hybrid key establishment’’ means a key establishment scheme that is a combination of two or more components that are themselves cryptographic key-establishment schemes.

(s) The term ‘‘identity verification’’ means the process of collecting identity information or evidence, validating its legitimacy, and confirming that it is associated with the real person providing it.

(t) The term ‘‘Intelligence Community’’ has the meaning given to it under 50 U.S.C. 3003(4).

(u) The term ‘‘key establishment’’ means the process by which a cryptographic key is securely shared between two or more entities.

(v) The term ‘‘least privilege’’ means the principle that a security architecture is designed so that each entity is granted the minimum system resources and authorizations that the entity needs to perform its function.

(w) The term ‘‘machine-readable’’ means that the product output is in a structured format that can be consumed by another program using consistent processing logic.

(x) The term ‘‘national security systems’’ or ‘‘NSS’’ has the meaning given to it under 44 U.S.C. 3552(b)(6).

(y) The term ‘‘patch’’ means a software component that, when installed, directly modifies files or device settings related to a different software component without changing the version number or release details for the related software component.

(z) The term ‘‘rules-as-code approach’’ means a coded version of rules (for example, those contained in legislation, regulation, or policy) that can be understood and used by a computer.

(aa) The term ‘‘secure booting’’ means a security feature that prevents malicious software from running when a computer system starts up. The security feature performs a series of checks during the boot sequence that helps ensure only trusted software is loaded.

(bb) The term ‘‘security control outcome’’ means the results of the performance or non-performance of safeguards or countermeasures prescribed for an information system or an organization to protect the confidentiality, integrity, and availability of the system and its information.

(cc) The term ‘‘zero trust architecture’’ has the meaning given to it in Executive Order 14028.

Sec. 11. General Provisions. (a) Nothing in this order shall be construed to impair or otherwise affect:

(b) This order shall be implemented in a manner consistent with applicable law and subject to the availability of appropriations.