system process
163524·updated Aug 30, 2026No definition recorded.
Composition
Source
control access between active entities or subjects (i.e., users or system processes acting on behalf of users) and passive entities or objects (i.e., devices, files, records, domains) in organizational systems. Types of system access includethe sentence this term was read in
generalized from a web lookup of the quoted expression at proposal time Verdict: term of art.
- system user - Glossary | CSRC
- 3.1.1: Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems) - CSF Tools
- Cuick Trac - Simplifying CMMC & NIST 800-171 Compliance
A definition generalized from search results is a draft to react to, not provenance. Confirm it against an authority document before this term is verified.
A web lookup ran when this term was proposed
An active principal in an information system — such as a daemon, service, agent, or other software execution context — that the operating environment recognizes as a subject capable of initiating operations and requesting access to resources. What distinguishes it from a human user is that it acts autonomously or on behalf of a user without direct interactive control: the system itself launches, schedules, or sustains the process under an assigned identity and privilege level. In access-control frameworks (e.g., NIST SP 800-53 AC-3, AC-6, NIST SP 800-171 control 3.1.1), the field uses the term to enumerate this category of active subject alongside human users when specifying who or what must be authenticated, authorized, and constrained by least-privilege rules.
Advisory only. A term this product ships is defined by an authority document, not by a search result.
Proposed during multiword review of this document in the CKI mapping queue.
Attested in
No recorded attestations. They are written when an MWE tagging stage is completed, stamped with the pack version and the document’s digest.