home/glossary/critical application

critical application

MWEid 163685·updated Oct 5, 2026
verified

No definition recorded.

Composition

critical+application

Source

document
NIST SP 800-171 Rev 3 - Protecting CUI in Nonfederal Systems
found in
proposed during MWE review from Jev verdict jev:9a404e19-31b3-452c-805b-7a09013dcbfa:e1010:374-403
element
e1010
proposed by
dorianc@moxywolf.com
discovery
ManualCuration
A system monitoring capability is achieved through a variety of tools and techniques (e.g., audit record monitoring software, intrusion detection systems, intrusion prevention systems, malicious code protection software, scanning tools, network monitoring software). Strategic locations for monitoring devices include selected perimeter locations and near server farms that support critical applications with such devices being employed at managed system interfaces. The granularity of monitoring the information collected is based on organizational monitoring objectives and the capability of the system to support such objectives.the sentence this term was read in
Where the definition came fromawaiting curator confirmation

generalized from a web lookup of the quoted expression, with 1 reviewed place(s) it is used as the term Verdict: term of art.

A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.

A web lookup ran when this term was proposed

An application classification assigned through impact analysis to any software system whose loss of availability, loss of integrity, or unauthorized access would materially impair an organization's mission, revenue, regulatory standing, or public safety obligations. It is distinguished from ordinary applications by the severity and breadth of harm its failure produces — not by its technical architecture — and the classification is operationalized by mandating a proportionately higher tier of security controls: stronger access governance, elevated monitoring priority, stricter change approval, and dedicated incident-response treatment. In federal and compliance frameworks, the category maps directly to what OMB Circular A-130 and NIST SP 800-18 call a "major application," meaning one that "requires special attention to security due to the risk and magnitude of harm resulting from the loss, misuse, or unauthorized access to or modification of the information in the application," because "certain applications, because of the information in them, require special management oversight and should be treated as major."

Advisory only. A term this product ships is defined by an authority document, not by a search result.

Proposed during multiword review of this document in the CKI mapping queue.

Attested in

No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.

Classifications

No parent term linked
MWE terms inherit classifications from a parent verb or noun. This MWE has no parent linkage; it is classified only by term-type and status.

Framework definitions

No framework-specific definitions
This term has not been bound to a regulatory framework with a sense definition.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.