This is a potential security issue, you are being redirected to https://csrc.nist.gov.
A control parameter that allows an organization to select a value from a list of pre-defined values provided as part of the control or control enhancement (e.g., selecting to either restrict an action or prohibit an action). See assignment and organization-defined control parameter.
NIST SP 800-37 Rev. 2