environment of operation

{
  "id": "MLC-T-CYB-001578",
  "term": "environment of operation",
  "field": "Cybersecurity",
  "definition": "1. The physical surroundings in which an information system processes, stores, and transmits information.\n\n2. The physical, technical, and organizational setting in which an information system operates, including but not limited to: missions/business functions; mission/business processes; threat space; vulnerabilities; enterprise and information security architectures; personnel; facilities; supply chain relationships; information technologies; organizational governance and culture; acquisition and procurement processes; organizational policies and procedures; organizational assumptions, constraints, risk tolerance, and priorities/trade-offs).",
  "references": [
    "CNSSI 4009-2022 from OMB Circular A-130 (2016); NIST SP 800-137; NIST SP 800-37 Rev. 2 from OMB Circular A-130 (2016); NIST SP 800-39; NIST SP 800-53 Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016); NIST SP 800-53B from OMB Circular A-130 (2016)",
    "NIST SP 800-30 Rev. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/environment-of-operation/"
}