thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

Organization-Defined Parameter (ODP)

Variable portion of a control that the organization sets, such as a frequency or time period.

Definition

Many SP 800-53 controls contain assignment or selection statements in brackets that the organization must define. FedRAMP and DoD overlays pre-assign many parameter values. Parameters ensure controls fit organizational context.

Example

AC-7 requires the organization to define the number of consecutive invalid logon attempts, set to 3.

Exam tip

ODP values must be documented in the SSP.

Related terms