The chronology of the origin, development, ownership, location, and changes to a system or system component and associated data. It may also include personnel and processes used to interact with or make modifications to the system, component, or associated data.
Sources:
NIST SP 800-161r1-upd1 [11/1/2024 errata update]
NIST SP 800-218 from NIST SP 800-53 Rev. 5
NIST SP 800-37 Rev. 2

  The chronology of the origin, development, ownership, location, and changes to a system or system component and associated data. It may also include the personnel and processes used to interact with or make modifications to the system, component, or associated data.
Sources:
NIST SP 800-53 Rev. 5

  The records describing the possession of, and changes to, components, component processes, information, systems, organization, and organizational processes. Provenance enables all changes to the baselines of components, component processes, information, systems, organizations, and organizational processes, to be reported to specific actors, functions, locales, or activities.
Sources:
NISTIR 7622 under Provenance

  Metadata pertaining to the origination or source of specified data.
Sources:
NIST Privacy Framework Version 1.0 under Provenance from NISTIR 8112 - Adapted