| ASHRAE | American Society of Heating, Refrigerating and Air-Conditioning Engineers |
| ATFP | antiterrorism and force protection |
| CISA | Cybersecurity and Infrastructure Security Agency |
| CS | control systems |
| CSF | Cybersecurity Framework |
| CVE | common vulnerability and exposure |
| DoD | Department of Defense |
| DOE | Department of Energy |
| eMASS | Enterprise Mission Assurance Support Service |
| FedRAMP | Federal Risk and Authorization Management Program |
| FFC | Federal Facilities Council |
| FRCS | facility-related control system |
| GAO | Government Accountability Office |
| GSA | General Services Administration |
| HVAC | heating, ventilation, and air conditioning |
| IBC | International Building Code |
| IMC | International Mechanical Code |
| IoT | Internet of Things |
| IP | Internet Protocol |
| IPC | International Plumbing Code |
| IT | information technology |
| MIT | Massachusetts Institute of Technology |
| NCCoE | National Cybersecurity Center of Excellence |
| NDAA | National Defense Authorization Act |
| NFPA | National Fire Protection Association |
| NIST | National Institute of Standards and Technology |
| OMB | Office of Management and Budget |
| OT | operational technology |
| OT-CERT | Operational Technology-Cyber Emergency Readiness Team |
| PLC | programmable logic controller |
| SCADA | supervisory control and acquisition |
| SOP | standard operating procedure |
| TTP | tactic, technique, and procedure |
| UFC | Unified Facilities Criteria |
| UFGS | Unified Facility Guide Specification |
| UPS | uninterruptible power supply |
| VA | Department of Veterans Affairs |
| VHA | Veterans Health Administration |
| VPN | virtual private network |