How Can We Help?
The process by which a security control baseline is modified based on: (i) the application of scoping guidance; (ii) the specification of compensating security controls, if needed; and (iii) the specification of organization-defined parameters in the security controls via explicit assignment and selection statements.
SOURCE: SP 800-37; SP 800-53; SP 800-53A; CNSSI-4009
