"OCTAVE — Operationally Critical Threat, Asset, and Vulnerability Evaluation; OGC — Office of Government Commerce; OLRC — Office of the Law Revision Counsel; OMB — Office of Management and Budget; OPSEC — operations security; OS — operating system; PC — personal computer; PE — physical and environmental; PGP — Pretty Good Privacy; PII — personally identifiable information; PKI — public key infrastructure; PMEF — primary mission essential function; POC — point of contact; QA — quality assurance; RA — risk assessment; RDF — resource description framework; RFC — request for comments; RSS — RDF Site Summary; SA — situational awareness; SCIF — Sensitive Compartment Information Facility; SDLC — system development lifecycle; SEI — Software Engineering Institute; SEIM — security event and incident management; SIPRNET — Secret Internet Protocol Router Network; SKiP — Security Knowledge in Practice; SLA — service level agreement; S/MIME — Secure/Multipurpose Internet Mail Extensions; SME — subject matter expert; SMS — short message service; SOC — security operations centre; SOP — standard operating procedure; SP — special publication; SSP — system security plan; STE — secure terminal equipment; SWO — senior watch officer; TERENA — Trans-European Research and Education Networking Association; TICAP — Trusted Internet Connection Access Provider; TS — top secret; TT&E — testing, training, and exercise; US-CERT — United States Computer Emergency Readiness Team; VPN — virtual private network; VS — vulnerability scanning; XML — Extensible Markup Language."