Authorization boundary

{
  "id": "MLC-T-CYB-000345",
  "term": "Authorization boundary",
  "field": "Cybersecurity",
  "definition": "1. All components of an information system to be authorized for operation by an authorizing official. This excludes separately authorized systems to which the information system is connected. Formerly known as \"accreditation boundary\".\n\n2. All components of an information system to be authorized for operation by an authorizing official and excludes separately authorized systems, to which the information system is connected.\n\n3. A discrete identifiable IT asset that represents a building block of an information system.\n\n4. See Authorization Boundary.",
  "synonyms": [
    "information system boundary",
    "Information System Component",
    "Security Authorization Boundary",
    "system boundary"
  ],
  "references": [
    "CNSSI 4009-2022 from OMB Circular A-130 (2016); NIST SP 800-161r1-upd1 [11/1/2024 errata update] from NIST SP 800-53 Rev. 5; NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016); NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016)",
    "NIST SP 800-137; NIST SP 800-30 Rev. 1; NIST SP 800-39",
    "NIST SP 800-128",
    "NIST SP 800-137; NIST SP 800-30 Rev. 1; NIST SP 800-37 Rev. 2; NIST SP 800-37 Rev. 2; NIST SP 800-39",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/authorization-boundary/"
}