Assessment Situation

Assessment Situation

Definition(s)


Assessment Situation

Jack-up configuration together with the environmental loading to be assessed. NOTE 1 For discussion on configuration, see 5.4.1. NOTE 2 The assessment situations are checked against the acceptance criteria of this part of ISO 19905 to demonstrate that the relevant limit states are not exceeded. Source: ISO 19905-1:202, Petroleum and natural gas industries – Site-specific assessment of mobile offshore units – Part 1: Jack-ups. Global Standards  
Assessor

Assessor

Definition(s)


Assessor

Person assigned by an accreditation body to perform, alone or as part of an assessment team, an assessment of a CAB. Source: ISO/IEC 17011:2004, Conformity assessment – General requirements for accreditation bodies accrediting conformity assessment bodies. Global Standards  

Assessor

Entity performing the site-specific assessment. Source: ISO 19905-1:202, Petroleum and natural gas industries – Site-specific assessment of mobile offshore units – Part 1: Jack-ups. Global Standards  
Asset

Asset

Definition(s)


RP 781 Security Plan

Assets may be categorized in many ways such as:
  1. people,
  2. hazardous materials (used or produced),
  3. information,
  4. environment,
  5. equipment,
  6. facilities,
  7. activities/operations, and
  8. company reputation.
Source: API RP 781 Security Plan Methodology for the Oil and Natural Gas Industries.1st Ed. September 2016. Global Standards  

Asset

A person, structure, facility, information, and records, information technology systems and resources, material, process, relationships, or reputation that has value. Extended Definition: Anything useful that contributes to the success of something, such as an organizational mission; assets are things of value or properties to which value can be assigned. Adapted from: DHS Risk Lexicon. Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards  

Asset

An identifiable resource with intrinsic financial value that is owned or controlled by the company and which provides benefits to its stakeholders. For the OMS, only tangible assets are relevant. A company may operate assets that are wholly owned or partly owned through joint ventures or other arrangements. Typically, an asset is a facility, or group of facilities, and may comprise land or sea acreage, buildings, plant, engineered structures, hardware or software, fixed or mobile equipment, vessels, aircraft: and road vehicles, terminals, pipelines, offices or retail outlets. Source: IOGP Report No. 510, Operating Management System Framework for controlling risk and delivering high performance in the oil and gas industry, International Association of Oil & Gas Producers, June 2014. Global Standards

Asset

An asset is any person, environment, facility, material, information, business reputation, or activity that has a positive value to an owner. The asset may have value to a threat, as well as an owner, although the nature and magnitude of those values may differ.

Source:API STANDARD 780, Security Risk Assessment Methodology for the Petroleum and Petrochemical Industries, First Edition, May 2013. Global Standards  

Asset

Anything that has value to an individual, an organization or a government.
  • NOTE Adapted from ISO/IEC 27000 to make provision for individuals and the separation of governments from organizations (4.37).
Source: ISO/IEC 27032:2015, Information technology — Security techniques — Guidelines for cybersecurity, First Edition, July 2012. Global Standards

Asset

Person, structure, facility, information, material, or process that has value. Sample Usage: Some organizations use an asset inventory to plan protective security activities. Extended Definition: includes contracts, facilities, property, records, unobligated or unexpended balances of appropriations, and other funds or resources, personnel, intelligence, technology, or physical infrastructure, or anything useful that contributes to the success of something, such as an organizational mission; assets are things of value or properties to which value can be assigned; from an intelligence standpoint, includes any resource – person, group, relationship, instrument, installation, or supply – at the disposal of an intelligence organization for use in an operational or support role. Annotation: In some domains, capabilities and activities may be considered assets as well. In the context of the National Infrastructure Protection Plan, people are not considered assets. Source: DHS Risk Lexicon, U.S. Department of Homeland Security, 2010 Edition. September 2010 Regulatory Guidance  

Asset

Any person, facility, material, information, business reputation, or activity that has value to an operator.

Source: Canadian Standards Association, Z246.1-09, Security management for petroleum and natural gas industry systems, August 2009, Regional Standards

Asset

Facilities and associated infrastructure, e.g. structures, wells, pipelines, reservoirs, accommodation & support services. Source: OGP Report No. 415, Asset integrity – the key to managing major incident risks, International Association of Oil & Gas Producers, December 2008. Global Standards  

Asset

Physical or logical object owned by or under the custodial duties of an organization, having either a perceived or actual value to the organization.
  • NOTE: In the case of industrial automation and control systems the physical assets that have the largest directly measurable value may be the equipment under control.
Source: ANSI/ISA–99.00.01–2007, Security for Industrial Automation and Control Systems, Part 1: Terminology, Concepts, and Models, 29 October 2007. National Standard
Asset Category

Asset Category

Definition(s)


Asset Category

Assets may be categorized in many ways. Among these are:
  • People,
  • Hazardous materials (used or produced),
  • Information
  • Environment
  • Equipment
  • Facilities
  • Activities/operations
  • Company reputation
Source:API STANDARD 780, Security Risk Assessment Methodology for the Petroleum and Petrochemical Industries, First Edition, May 2013. Global Standards
Asset Integrity

Asset Integrity

Definition(s)


Asset integrity

The prevention of major incidents (see expanded definition on page 3) Source: OGP Report No. 415, Asset integrity – the key to managing major incident risks, International Association of Oil & Gas Producers, December 2008. Global Standards  

Asset integrity

Within this guide, asset integrity is related to the prevention of major incidents. It is an outcome of good design, construction and operating practices. It is achieved when facilities are structurally and mechanically sound and perform the processes and produce the products for which they were designed. The emphasis in this guide is on preventing unplanned hydrocarbon releases that may, either directly or via escalation, result in a major incident. Structural failure or marine events may also be initiating causes that escalate to become a major incident. This guide applies to such events but there may be additional considerations covered here. Broader aspects of asset integrity related to the prevention of environmental or commercial losses are not addressed. However, subject to appropriate prioritisation, the same tools can be applied for these risks. Source: OGP Report No. 415, Asset integrity – the key to managing major incident risks, International Association of Oil & Gas Producers, December 2008. Global Standards  

Asset integrity

Asset integrity is related to the prevention of major incidents. It is an outcome of good design, construction and operating practice. It is achieved when facilities are structurally and mechanically sound and perform the processes and produce the products for which they were designed. The emphasis in this guide is on preventing unplanned hydrocarbon and other hazardous releases that may – either directly or via escalation – result in a major incident. Structural failures may also be initiating causes that escalate to become a major incident. Source: OGP Report No. 456, Process Safety – Recommended Practice on Key Performance Indicators, International Association of Oil & Gas Producers, November 2011. Global Standards  

Asset integrity

Asset integrity is related to the prevention of major incidents. It is an outcome of good design, construction and operating practice. It is achieved when facilities are structurally and mechanically sound and perform the processes and produce the products for which they are designed. The emphasis in this guide is on preventing loss of primary containment (LOPC) that may, either directly or via escalation, result in a major incident. Apart from LOPC, there are other types of asset integrity event, such as structural failure, that could cause a major incident, but these are not covered by the guidance in this report. Source: OGP Report No. 456, Process Safety – Recommended Practice on Key Performance Indicators, International Association of Oil & Gas Producers, November 2011. Global Standards
Asset Owner

Asset Owner

Definition(s)


Asset Owner

In this context, the asset owner is the oilfield operator. Source:  DNVGL-RP-G108, Cyber security in the oil and gas industry based on IEC 62443, DNV GL, September 2017. Global Standards
Assigned Protection Factor

Assigned Protection Factor

Definition(s)


Assigned Protection Factor

Workplace level of respiratory protection that a respirator or class of respirators is expected to provide to a population of properly fitted and trained users. NOTE For example, an APF of 10 for a respirator means that a user could expect to inhale no more than one tenth of the airborne contaminant present. Source: API RP 98, Personal Protective Equipment Selection for Oil Spill Responders, First Edition, August 2013. Global Standards
Assist Gas

Assist Gas

Definition(s)


Assist Gas

Flammable gas that is added to relief gas prior to the flare burner or at the point of combustion in order to raise the heating value.
  • NOTE In some designs, the assist gas can increase turbulence for improved combustion.
Source:API STD 521, Pressure-relieving and Depressuring Systems, Sixth Edition, January 2014. Global Standards

Assist Gas

Combustible gas that is added to relief gas prior to the flare burner or at the point of combustion in order to raise the heating value. Source: API STD 521, Pressure-relieving and Depressuring Systems, Fifth Edition, January 2007 (Addendum May 2008). Global Standards 
Associated Apparatus

Associated Apparatus

Definition(s)


Associated Apparatus

Electrical apparatus which contains both intrinsically safe circuits and non-intrinsically safe circuits and is constructed so that the non-intrinsically safe circuits cannot adversely affect the intrinsically safe circuits. Source: IEC 60079-14:2013, Explosive atmospheres – Part 14: Electrical installations design, selection and erection, Edition 5.0, November 2013. Global Standards  

Associated Apparatus

Apparatus used in intrinsically safe systems in which the circuits are not necessarily intrinsically safe themselves but affect the energy in the intrinsically safe circuits and are relied on to maintain intrinsic safety, see NEC Articles 504.4 and 505.8 for additional details.

Source: API Recommended Practice 14FZ, Recommended Practice for Design, Installation, and Maintenance of Electrical Systems for Fixed and Floating Offshore Petroleum Facilities for Unclassified and Class I, Zone 0, Zone 1, and Zone 2 Locations, Second Edition, May 2013. Global Standards
Associated Energy-limited Apparatus

Associated Energy-limited Apparatus

Definition(s)


Associated Energy-limited Apparatus

Electrical equipment which contains both energy-limited and non-energy-limited circuits and is constructed so that the non-energy-limited circuits cannot adversely affect the energy-limited circuits. Source: IEC 60079-14:2013, Explosive atmospheres – Part 14: Electrical installations design, selection and erection, Edition 5.0, November 2013. Global Standards
Assumed Surface Temperature

Assumed Surface Temperature

Definition(s)


Assumed Surface Temperature (TAS)

Assumed temperature at surface used for calculating a pseudo-temperature gradient. Source: API RP 10B-2, Recommended Practice for Testing Well Cements, First Edition, July 2005 (Reaffirmed: July 2010). Global Standards  
ASTM

ASTM

Definition(s)


ASTM

American Society for Testing and Materials. Source: API STD 521, Pressure-relieving and Depressuring Systems, Sixth Edition, January 2014. Global Standards Source: API Standard 2RD, Dynamic Risers for Floating Production Systems, Second Edition, September 2013. Global Standards Source: API RP 500, Recommended Practice for Classification of Locations for Electrical Installations at Petroleum Facilities Classified as Class I, Division 1 and Division 2, Third Edition, December 2012, Global Standards Source: API RP 14F, Design, Installation, and Maintenance of Electrical Systems for Fixed and Floating Offshore Petroleum Facilities for Unclassified and Class 1, Division 1 and Division 2 Locations, Fifth Edition, July 2008. Global Standards Source: API RP 14G, Recommended Practice for Fire Prevention and Control on Fixed Open-type Offshore Production Platforms: Upstream Segment, Fourth Edition, April 2007. Global Standards Source: API SPEC 13A, Specification for Drilling Fluids Materials, Eighteenth Edition, February 2010. Global Standards Source: API SPEC 16A, Specification for Drill-through Equipment, Third Edition, June 2004 (Errata/Supplement November 2004). Global Standards Source: API SPEC 16C, Specification for Choke and Kill Systems, First Edition, January 1993 (Reaffirmed 2001). Global Standards Source: API SPEC 16RCD, Specification for Drill Through Equipment—Rotating Control Devices, Upstream Segment, First Edition, February 2005. Global Standards Source: API SPEC 17F, Specification for Subsea Production Control Systems, Second Edition, December 2006 (Reaffirmed April 2011). Global Standards Source: API RP 98, Personal Protective Equipment Selection for Oil Spill Responders, First Edition, August 2013. Global Standards Source: API RP 2FB, Recommended Practice for the Design of Offshore Facilities Against Fire and Blast Loading, First Edition, April 2006. Global Standards Source: Mining Regulation of the Netherlands, WJZ 02063603, Netherlands,16 December 2002. Regulations  

ASTM

ASTM International. Source: API RP 17G, Recommended Practice for Completion/Workover Risers, Second Edition, July 2006 (Reaffirmed April 2011). Global Standards  

ASTM

“ASTM” means ASTM International - an international standards developing organization that develops and publishes voluntary technical standards for a wide range of materials, products, systems and services. Source: Oil and Gas, New Mexico Administrative Code Title 19, Chapter 15, January 2013. Regulations  

ASTM

“ASTM” means ASTM international, formerly known as the American society for testing and materials. Source: Division of Mineral Resources Management - Oil and Gas, Ohio Administrative Code, Chapter 1501:9, January 2012. Regulations  

ASTM

"ASTM" means American Society for Testing and Materials. Source: State of Wyoming Occupational Safety and Health Rules and Regulations for Oil and Gas Well Drilling, Revised January 8, 2013. Regulations
ASV

ASV

Definition(s)


ASV

Annulus Safety Valve. Source: ISO 16530-1:2017, Petroleum and natural gas industries - Well integrity – Part 1: Life cycle governance, First Edition, March 2017. Global Standards

ASV

Annulus Safety Valve - see also ASCSSV. Source: 117 OLF, Norwegian Oil and Gas Association recommended guidelines for Well Integrity, No. 117, Revision No. 4, June 2011. Global Standards

ASV

Annulus swab valve. Source: API RP 17A, Design and Operation of Subsea Production Systems—General Requirements and Recommendations, Fourth Edition, Reaffirmed 2011. Global Standards Source: API SPEC 17D, Design and Operation of Subsea Production Systems—Subsea Wellhead and Tree Equipment, Upstream Segment, Second Edition May 2011 (Errata September 2011). Global Standards  
Asymmetric Cryptography

Asymmetric Cryptography

Definition(s)


Asymmetric Cryptography

A branch of cryptography in which a cryptographic system or algorithms use two uniquely linked keys: a public key and a private key (a key pair). Adapted from: CNSSI 4009, FIPS 140-2, InCommon Glossary Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Asymptotic Failure Rate

Asymptotic Failure Rate

Definition(s)


Asymptotic Failure Rate

3.1.20 λ as limit, when it exists, of the failure rate λ(t) when t goes to infinity asymptotic failure rate fig.32   fig.33   fig34 Source: ISO/TR 12489:2013(E) Reliability modelling and calculation of safety systems. Global Standards
Atlantic Canada Offshore Petroleum Area

Atlantic Canada Offshore Petroleum Area

Definition(s)


Atlantic Canada Offshore Petroleum Area

Refers to the combined offshore area regulated by the Canada-Nova Scotia Offshore Petroleum Board and the Canada-Newfoundland and Labrador Offshore Petroleum Board. Source: Atlantic Canada Offshore Petroleum Industry, Standard Practice for the Training and Qualifications of Personnel, 2013, Canadian Association of Petroleum Producers, Global Standards
Atmosphere

Atmosphere

Definition(s)


Atmosphere, explosive

A mixture with air, under atmospheric conditions, of flammable substances in the form of gas, vapor, mist, or dust in which, after ignition, combustion spreads throughout the unconsumed mixture. Source: API RP 14F, Design, Installation, and Maintenance of Electrical Systems for Fixed and Floating Offshore Petroleum Facilities for Unclassified and Class 1, Division 1 and Division 2 Locations, Fifth Edition, July 2008. Global Standards
Atmosphere, Explosive

Atmosphere, Explosive

Definition(s)


Atmosphere, Explosive

A mixture with air, under atmospheric conditions, of flammable substances in the form of gas, vapor, mist, or dust in which, after ignition, combustion spreads throughout the unconsumed mixture.

Source: API Recommended Practice 14FZ, Recommended Practice for Design, Installation, and Maintenance of Electrical Systems for Fixed and Floating Offshore Petroleum Facilities for Unclassified and Class I, Zone 0, Zone 1, and Zone 2 Locations, Second Edition, May 2013. Global Standards
Atmospheric Discharge

Atmospheric Discharge

Definition(s)


Atmospheric Discharge

Release from pressure-relieving and depressuring devices to the atmosphere.

Source:API STD 521, Pressure-relieving and Depressuring Systems, Sixth Edition, January 2014. Global Standards

Atmospheric Discharge

Release of vapours and gases from pressure-relieving and depressuring devices to the atmosphere. Source: API STD 521, Pressure-relieving and Depressuring Systems, Fifth Edition, January 2007 (Addendum May 2008). Global Standards 
Atmospheric Pressure Consistometer

Atmospheric Pressure Consistometer

Definition(s)


Atmospheric Pressure Consistometer

Device used for stirring and conditioning the cement slurry. NOTE The device is not intended to measure thickening time. Source: API SPEC 10A, Specification for Cements and Materials for Well Cementing, Twenty-fourth Edition, December 2010. Global Standards
Atmospheric zone

Atmospheric zone

Definition(s)


Atmospheric zone

The external surfaces of the unit above the splash zone. Source: Offshore Standard DNV-OS-C101, Design of Offshore Steel Structures, General (LRFD Method, Det Norske Veritas, April 2011. Global Standards  

Atmospheric zone

That part of the external structure above the splash zone. Source: Rules and Regulations for the Classification of Mobile Offshore Units, Part 8, Corrosion Controls, June 2013, Lloyd’s Register, Global Standards
Attachment Weld

Attachment Weld

Definition(s)


Attachment Weld

Fillet or full penetration weld used for attachment of components to pipe or coupling. Source: API Standard 2RD, Dynamic Risers for Floating Production Systems, Second Edition, September 2013. Global Standards Source: API RP 17G, Recommended Practice for Completion/Workover Risers, Second Edition, July 2006 (Reaffirmed April 2011). Global Standards  
Attack

Attack

Definition(s)


Attack

Assault on a system that derives from an intelligent threat — i.e., an intelligent act that is a deliberate attempt (especially in the sense of a method or technique) to evade security services and violate the security policy of a system [11].
  • NOTE: There are different commonly recognized classes of attack:
    • An "active attack" attempts to alter system resources or affect their operation. A "passive attack" attempts to learn or make use of information from the system but does not affect system resources.
    • An "inside attack" is an attack initiated by an entity inside the security perimeter (an "insider") – i.e., an entity that is authorized to access system resources but uses them in a way not approved by those who granted the authorization. An "outside attack" is initiated from outside the perimeter, by an unauthorized or illegitimate user of the system (including an insider attacking from outside the security perimeter). Potential outside attackers range from amateur pranksters to organized criminals, international terrorists, and hostile governments.
Source: ANSI/ISA–99.00.01–2007, Security for Industrial Automation and Control Systems, Part 1: Terminology, Concepts, and Models, 29 October 2007. National Standard

Attack

Attempt to destroy, expose, alter, disable, steal or gain unauthorized access to or make unauthorized use of an asset. Source: ISO/IEC 27000:2014, Information technology — Security techniques — Information security management systems — Overview and vocabulary, Third Edition, January 2014. Global Standards  

Attack

Attempt to destroy, expose, alter, disable, steal or gain unauthorized access to or make unauthorized use of an asset. [ISO/IEC 27000:2009]. Source: ISO/IEC 27032:2015, Information technology — Security techniques — Guidelines for cybersecurity, First Edition, July 2012. Global Standards

Attack

An attempt to gain unauthorized access to system services, resources, or information, or an attempt to compromise system integrity. Extended Definition: The intentional act of attempting to bypass one or more security services or controls of an information system. From: NCSD Glossary. NTSSI 4009 (2000), CNSSI 4009 Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Attack Method

Attack Method

Definition(s)


Attack Method

Manner and means, including the weapon and delivery method, a threat may use to cause harm on a target.

Source:API STANDARD 780, Security Risk Assessment Methodology for the Petroleum and Petrochemical Industries, First Edition, May 2013. Global Standards

Attack Method

Manner and means, including the weapon and delivery method, an adversary may use to cause harm on a target. Sample Usage: Analysts have identified weaponization of an aircraft as an attack method that terrorists may use. Annotation: Attack method and attack mode are synonymous. Source: DHS Risk Lexicon, U.S. Department of Homeland Security, 2010 Edition. September 2010 Regulatory Guidance

Attack Method

The manner or technique and means an adversary may use in an assault on information or an information system. Adapted from: DHS Risk Lexicon, NCSD Glossary Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards  

Attack Method

The steps that an adversary takes or may take to plan, prepare for, and execute an attack. Adapted from: DHS Risk Lexicon, NCSD Glossary Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Attack Mode

Attack Mode

Definition(s)


Attack Mode

The steps that an adversary takes or may take to plan, prepare for, and execute an attack. Adapted from: DHS Risk Lexicon, NCSD Glossary Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Attack Path

Attack Path

Definition(s)


Attack Path

Steps that a threat takes or may take to plan, prepare for, and execute an attack.

Source:API STANDARD 780, Security Risk Assessment Methodology for the Petroleum and Petrochemical Industries, First Edition, May 2013. Global Standards

Attack Path

Steps that an adversary takes or may take to plan, prepare for, and execute an attack. Sample Usage: Part of the attack path for the car bombing involved dozens of individuals moving money, arms and operatives from the terrorist safe haven to the target area. Annotation: An attack path may include recruitment, radicalization, and training of operatives, selection and surveillance of the target, construction or procurement of weapons, funding, deployment of operatives to the target, execution of the attack, and related post-attack activities. Source: DHS Risk Lexicon, U.S. Department of Homeland Security, 2010 Edition. September 2010 Regulatory Guidance

Attack Path

The steps that an adversary takes or may take to plan, prepare for, and execute an attack. Adapted from: DHS Risk Lexicon, NCSD Glossary Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Attack Pattern

Attack Pattern

Definition(s)


Attack Pattern

Similar cyber events or behaviors that may indicate an attack has occurred or is occurring, resulting in a security violation or a potential security violation. Extended Definition: For software, descriptions of common methods for exploiting software systems. Adapted from: Oak Ridge National Laboratory Visualization Techniques for Computer Network Defense, MITRE's CAPEC web site Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Attack Potential

Attack Potential

Definition(s)


Attack Potential

Perceived potential for success of an attack, should an attack be launched, expressed in terms of an attacker’s expertise, resources and motivation. [ISO/IEC 15408-1:2005]. Source: ISO/IEC 27032:2015, Information technology — Security techniques — Guidelines for cybersecurity, First Edition, July 2012. Global Standards  
Attack Signature

Attack Signature

Definition(s)


Attack Signature

A characteristic or distinctive pattern that can be searched for or that can be used in matching to previously identified attacks. Extended Definition: An automated set of rules for identifying a potential threat (such as an exploit or the presence of an attacker tool) and possible responses to that threat. Adapted from: NCSD Glossary, CNSSI 4009, ISSG V1.2 Database Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards
Attack Surface

Attack Surface

Definition(s)


Attack Surface

The set of ways in which an adversary can enter a system and potentially cause damage. Extended Definition: An information system's characteristics that permit an adversary to probe, attack, or maintain presence in the information system. Adapted from: Manadhata, P.K., & Wing, J.M. in Attack Surface Measurement, retrieved from http://www.cs.cmu.edu/~pratyus/as.html#introduction Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies (https://niccs.us-cert.gov/glossary) as of 11 November 2015, Global Standards