authority

{
  "id": "MLC-T-CYB-000341",
  "term": "authority",
  "field": "Cybersecurity",
  "definition": "1. Person(s) or established bodies with rights and responsibilities to exert control in an administrative sphere.\n\n2. A privacy principle (FIPP) that limits an organization's creation, collection, use, processing, storage, maintaining, disseminating, or disclosing of PII to activities for which they have authority to do so, and identify this authority in appropriate notices.\n\n3. The aggregate of people, procedures, documentation, hardware, and/or software necessary to authorize and enable security-relevant functions.\n\n4. The organization responsible for producing the original security configuration guidance represented by the checklist.",
  "references": [
    "CNSSI 4009-2015",
    "CNSSI 4009-2022 from OMB Circular A-130 (2016) (adapted)",
    "NIST SP 800-57 Part 2 [Superseded]",
    "NIST SP 800-70 Rev. 4",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/authority/"
}