non-security function

A category of system or application capability whose purpose is the delivery of business, operational, or user productivity outcomes — email, file editing, data entry, reporting — as distinct from capabilities that enforce, configure, audit, or administer the security posture of the system itself. Standards such as NIST SP 800-171 contrast it with "security functions," which include the elevated capabilities that privileged accounts are granted to access resources otherwise restricted to non-privileged users. The expression is used operationally to require that users holding privileged accounts drop to non-privileged accounts when doing work that does not involve those security capabilities, thereby limiting unauthorized access to and manipulation of security functions or security-relevant information. The distinction is the basis for enforcing least-privilege and separation-of-duties controls: users may only have access to the minimum level of information and resources necessary to perform their job functions.

Advisory only. A term this product ships is defined by an authority document, not by a search result.