A fully specified set of security controls, control enhancements, and supplemental guidance derived from tailoring a security baseline to fit the user’s specific environment and mission.
Sources:
NISTIR 8183
under Overlay
NISTIR 8183 Rev. 1
under Overlay