security domain

{
  "id": "MLC-T-CYB-003805",
  "term": "security domain",
  "field": "Cybersecurity",
  "definition": "1. A domain operating at a single security level (which includes a unique combination of classification, releasabilities, and dissemination controls) that implements a security policy and is administered by a single authority.\n\n2. An environment or context that includes a set of system resources and a set of system entities that have the right to access the resources as defined by a common security policy, security model, or security architecture. See Security Domain.\n\n3. A system or subsystem that is under the authority of a single trusted authority. Security domains may be organized (e.g., hierarchically) to form larger domains.\n\n4. A set of elements, data, resources, and functions that share a commonality in combinations of (1) roles supported, (2) rules governing their use, and (3) protection needs.\n\n5. Set of assets and resources subject to a common security policy.\n\n6. A set of systems under common administrative and access control.",
  "abbreviation": "domain",
  "references": [
    "CNSSI 4009-2022 from CNSSP 24 (adapted); NIST SP 800-137; NIST SP 800-171r3 from CNSSI 4009-2022 (adapted); NIST SP 800-172r3 from NIST SP 800-53A Rev. 5 (adapted); NIST SP 800-53 Rev. 5 from CNSSI 4009-2022",
    "NIST SP 800-53 Rev. 5",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-160v1r1 from ISO/IEC/IEEE 24765:2017",
    "NIST SP 800-160v1r1 from ISO/IEC 19989-3:2020",
    "NIST SP 800-63-4",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/security-domain/"
}