component

{
  "id": "MLC-T-CYB-000798",
  "term": "component",
  "field": "Cybersecurity",
  "definition": "1. An element of a large system - such as an identity card, issuer, card reader, or identity verification support - within the PIV system.\n\n2. Smallest selectable set of elements on which requirements may be based.\n\n3. A discrete identifiable information technology asset that represents a building block of a system and may include hardware, software, and firmware.\n\n4. A software object, meant to interact with other components, encapsulating certain functionality or a set of functionalities. A component has a clearly defined interface and conforms to a prescribed behavior common to all components within an architecture.\n\n5. A discrete identifiable IT asset that represents a building block of an information system.\n\n6. Any hardware, software, and/or firmware required to construct a CKMS.\n\n7. An element such as a fingerprint capture station or card reader used by an issuer, for which [FIPS 201-2] has defined specific requirements.\n\n8. See system component.\n\n9. Member of a set of elements that constitute a system.\n\n10. See information system component.\n\n11. Discrete identifiable information technology assets that represent a building block of a system and include hardware, software, firmware, and virtual machines.\n\n12. A discrete identifiable information or operational technology asset that represents a building block of a system and may include hardware, software, and firmware.\n\n13. A discrete, identifiable information technology asset that represents a building block of a system and may include hardware, software, and firmware.\n\n14. An entity with discrete structure, such as an assembly or software module, within a system considered at a particular level of analysis. Component refers to a part of a whole, such as a component of a software product, a component of a software identification tag, etc.\n\n15. A hardware, software, or firmware part or element of a larger system with well-defined inputs and outputs and a specific function.\n\n16. A hardware, software, firmware part or element of a larger PNT system with well-defined inputs and outputs and a specific function.",
  "synonyms": [
    "Information System Component",
    "system component",
    "system element"
  ],
  "references": [
    "FIPS 201-3",
    "CNSSI 4009-2022 from ISO/IEC 15408-1:2009",
    "NIST SP 800-128; NIST SP 800-171r3 from NIST SP 800-128; NIST SP 800-37 Rev. 2 from NIST SP 800-128; NIST SP 800-53 Rev. 5 from NIST SP 800-128; NIST SP 800-53A Rev. 5 from NIST SP 800-128",
    "NIST SP 800-95 from Web Services Glossary - W3C Working Group Note 11 February 2004",
    "NIST SP 800-128",
    "NIST SP 800-152",
    "NIST SP 800-79-2",
    "NIST SP 800-128; NIST SP 800-37 Rev. 2; NIST SP 800-53 Rev. 5; NIST SP 800-53A Rev. 5",
    "NIST SP 800-160 Vol. 2 Rev. 1 from ISO/IEC/IEEE 15288:2015; NIST SP 800-160v1r1 from ISO/IEC/IEEE 15288:2015; NIST SP 800-37 Rev. 2 from ISO/IEC/IEEE 15288:2015",
    "NIST SP 800-160 Vol. 2 Rev. 1 from NIST SP 800-53 Rev. 5",
    "NIST SP 800-161r1-upd1 [11/1/2024 errata update]",
    "NIST SP 800-172r3 from NIST SP 800-63-4",
    "NISTIR 7695",
    "NIST IR 8401 from DHS RCF (adapted); NIST IR 8441 from DHS RCF (Adapted)",
    "NIST IR 8323r1 from DHS RCF v2.0 (adapted)",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/component/"
}