information system component

{
  "id": "MLC-T-CYB-002133",
  "term": "information system component",
  "field": "Cybersecurity",
  "definition": "1. An element of a large system - such as an identity card, issuer, card reader, or identity verification support - within the PIV system.\n\n2. All components of an information system to be authorized for operation by an authorizing official and excludes separately authorized systems, to which the information system is connected.\n\n3. A discrete, identifiable information technology asset (e.g., hardware, software, firmware) that represents a building block of an information system. Information system components include commercial information technology products.\n\n4. A software object, meant to interact with other components, encapsulating certain functionality or a set of functionalities. A component has a clearly defined interface and conforms to a prescribed behavior common to all components within an architecture.\n\n5. A discrete identifiable IT asset that represents a building block of an information system.\n\n6. A system, component, application, etc., that is based upon technology which is used to electronically process, store, or transmit information.\n\n7. Any hardware, software, and/or firmware required to construct a CKMS.\n\n8. An element such as a fingerprint capture station or card reader used by an issuer, for which [FIPS 201-2] has defined specific requirements.\n\n9. See system component.\n\n10. See Authorization Boundary.\n\n11. See information system component.\n\n12. An entity with discrete structure, such as an assembly or software module, within a system considered at a particular level of analysis. Component refers to a part of a whole, such as a component of a software product, a component of a software identification tag, etc.\n\n13. A hardware, software, firmware part or element of a larger PNT system with well-defined inputs and outputs and a specific function.\n\n14. An element of a large system, such as an identity card, PIV Issuer, PIV Registrar, card reader, or identity verification support, within the PIV system.",
  "abbreviation": "Component",
  "synonyms": [
    "Authorization Boundary",
    "information technology product",
    "ISC"
  ],
  "references": [
    "FIPS 201-3",
    "NIST SP 800-137 from NIST SP 800-37; NIST SP 800-161 [Superseded] from NIST SP 800-53 Rev. 4; NIST SP 800-30 Rev. 1 from CNSSI 4009; NIST SP 800-37 Rev. 1 [Superseded]; NIST SP 800-39 from NIST SP 800-37; NIST SP 800-53 Rev. 4 [Superseded]; NIST SP 800-53A Rev. 4 [Superseded] from NIST SP 800-37",
    "CNSSI 4009-2015 from NIST SP 800-53 Rev. 4; NIST SP 800-53 Rev. 4 [Superseded] from NIST SP 800-128 (Adapted)",
    "NIST SP 800-95 from Web Services Glossary - W3C Working Group Note 11 February 2004",
    "NIST SP 800-128; NIST SP 800-128",
    "NIST SP 800-128",
    "NIST SP 800-152",
    "NIST SP 800-79-2",
    "NIST SP 800-128; NIST SP 800-37 Rev. 2; NIST SP 800-53 Rev. 5",
    "NIST SP 800-53 Rev. 4 [Superseded] from NIST SP 800-128 (Adapted)",
    "CNSSI 4009-2015; NIST SP 800-128; NIST SP 800-53 Rev. 4 [Superseded]",
    "NISTIR 7695 from ISO/IEC 19770-2 (Adapted)",
    "NISTIR 8323 [Superseded] from NIST SP 800-160 Vol. 1 (Adapted), DHS RCF (Adapted)",
    "FIPS 201 [version unknown]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/information-system-component/"
}