information domain

{
  "id": "MLC-T-CYB-002101",
  "term": "information domain",
  "field": "Cybersecurity",
  "definition": "A three-part concept for information sharing, independent of, and across information systems and security domains that 1) identifies information sharing participants as individual members, 2) contains shared information objects, and 3) provides a security policy that identifies the roles and privileges of the members and the protections required for the information objects.\n\nAn information domain may contain data that is at different security levels, and not all data in an information domain is releasable or discloseable to all participants. Participants in an information domain must acknowledge the increased risk of the potential for unintended release or disclosure of information.\n\nNote: Information domains may be authorized to use alternative separation and isolation mechanisms to protect data in lieu of a cross domain solution.",
  "references": [
    "CNSSI 4009-2022",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/information-domain/"
}