Information System User

{
  "id": "MLC-T-CYB-002140",
  "term": "Information System User",
  "field": "Cybersecurity",
  "definition": "1. A person, team, or organization that accesses or otherwise uses an OLIR.\n\n2. A person or entity with authorized access.\n\n3. Individual or (system) process authorized to access an information system.\n\n4. Individual, or (system) process acting on behalf of an individual, authorized to access an information system.\nSee Organizational User and Non-Organizational User.\n\n5. See Information System User\n\n6. The term user refers to an individual, group, host, domain, trusted communication channel, network address/port, another netwoik, a remote system (e.g., operations system), or a process (e.g., service or program) that accesses the network, or is accessed by it, including any entity that accesses a network support entity to perform OAM&Prelated tasks. Regardless of their role, users must be required to successfully pass an identification and authentication (I&A) mechanism. For example, I&A would be required for a security or system administrator. For customers, I&A could be required for billing purposes.\nFor some services (e.g.. Emergency Services) a customer may not need to be authenticated by the system.\n\n7. An FCKMS role that utilizes the key-management services offered by an FCKMS service provider.\n\n8. See Entity.\n\n9. A human entity.\n\n10. Individual, or (system) process acting on behalf of an individual, authorized to access an information system.\n[Note: With respect to SecCM, an information system user is an individual who uses the information system functions, initiates change requests, and assists with functional testing.]\n\n11. An individual (person). Also see Entity.\n\n12. Person who interacts with the product.\n\n13. A person, organization, or other entity which requests access to and uses the resources of a computer system or network.\n\n14. The entity, human or machine, that is identified by the userID, authenticated prior to system access, the subject of all access control decisions, and held accountable via the audit reporting system.\n\n15. the set of people, both trusted (e.g., administrators) and untrusted, who use the system.\n\n16. A consumer of the services offered by an RP.\n\n17. A person, team, or organization that accesses or otherwise uses an Online Informative Reference.",
  "abbreviation": "ISU",
  "synonyms": [
    "User"
  ],
  "references": [
    "NIST IR 8278r1; NIST IR 8278Ar1",
    "NIST SP 800-66 Rev. 1 [Superseded] from 45 C.F.R., Sec. 164.304",
    "NIST SP 800-18 Rev. 1 [Superseded] from CNSSI 4009",
    "NIST SP 800-53 Rev. 4 [Superseded] from CNSSI 4009 (Adapted)",
    "NIST SP 800-128",
    "NIST SP 800-13 [Withdrawn]",
    "NIST SP 800-152",
    "NIST SP 800-57 Part 1 Rev. 4 [Superseded]; NIST SP 800-57 Part 1 Rev. 3 [Superseded]",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 800-128 from CNSSI 4009",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NISTIR 8040 from ISO 9241-11:1998",
    "NISTIR 4734",
    "NISTIR 5153",
    "NISTIR 6192",
    "NISTIR 8149",
    "NISTIR 8278; NISTIR 8278A",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/information-system-user/"
}