organizational system
163526·updated Aug 30, 2026No definition recorded.
Composition
Source
or objects (i.e., devices, files, records, domains) in organizational systems. Types of system access includethe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
- external information system (or component) - Glossary | CSRC
- external information system service - Glossary | CSRC
- security concept of operations (Security CONOP) - Glossary | CSRC
- NIST SP 800-53
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
A discrete information system — comprising hardware, software, firmware, and associated processes — that is owned, operated, or controlled within an organization's authorization boundary and subject to that organization's security and privacy controls. It is distinguished from external systems by its inclusion inside the boundary of authority where the organization directly governs the application of controls, and from the broader concept of "information system" by its relational, ownership-grounding modifier: the adjective scopes the system to a specific accountable entity. The field uses it as the standard unit of analysis in risk management, access control, and control assessment — the thing to which subjects and objects belong, against which security categories are assigned, and across which authorization decisions apply.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.