security control baseline

The set of minimum security controls defined for a low-impact, moderate-impact, or high-impact information system.