user

{
  "id": "MLC-T-CYB-004525",
  "term": "user",
  "field": "Cybersecurity",
  "definition": "1. Individual or (system) process authorized to access an information system.\n\n2. An individual (person), organization, device or process. Used interchangeably with “party.”\n\n3. An individual who is required to use COMSEC material in the performance of his/her official duties and who is responsible for safeguarding that COMSEC material.\n\n4. Individual, or (system) process acting on behalf of an individual, authorized to access a system.\n\n5. Individual or group that interacts with a system or benefits from a system during its utilization.\n\n6. An individual (person), organization, device or process. Used interchangeably with “party”.\n\n7. See Information System User\n\n8. An individual (person), organization, device, or process.\n\n9. An FCKMS role that utilizes the key-management services offered by an FCKMS service provider.\n\n10. An individual (person), organization, device, or process. “Party” is a synonym.\n\n11. An individual (person), organization, device or process.\n\n12. A human (person/individual/user), organization, device or process.\n\n13. A human entity.\n\n14. See system user.\n\n15. Individual, or (system) process acting on behalf of an individual, authorized to access an information system.\n[Note: With respect to SecCM, an information system user is an individual who uses the information system functions, initiates change requests, and assists with functional testing.]\n\n16. An individual (person). Also see Entity.\n\n17. A person, device, service, network, domain, manufacturer, or other party who might interact with an IoT device.\n\n18. An individual (person), organization, device, or process; used interchangeably with “party.”\n\n19. See organizational user and non-organizational user.\n\n20. A person or entity with authorized access.\n\n21. Person who interacts with the product.\n\n22. A person, organization, or other entity which requests access to and uses the resources of a computer system or network.\n\n23. The entity, human or machine, that is identified by the userID, authenticated prior to system access, the subject of all access control decisions, and held accountable via the audit reporting system.\n\n24. the set of people, both trusted (e.g., administrators) and untrusted, who use the system.\n\n25. A consumer of the services offered by an RP.\n\n26. A person, team, or organization that accesses or otherwise uses an OLIR.",
  "synonyms": [
    "Entity",
    "Information System User"
  ],
  "references": [
    "FIPS 200",
    "FIPS 186-5",
    "CNSSI 4009-2022 from CNSSI 4005",
    "NIST SP 800-53 Rev. 5; NIST SP 800-53A Rev. 5",
    "NIST SP 800-160v1r1",
    "NIST SP 800-102; NIST SP 800-89",
    "NIST SP 800-128",
    "NIST SP 800-175B Rev. 1",
    "NIST SP 800-152",
    "NIST SP 800-56B Rev. 2",
    "NIST SP 800-57 Part 1 Rev. 5",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST SP 800-213; NISTIR 8259A; NISTIR 8259B",
    "NIST SP 800-133 Rev. 2",
    "NIST SP 800-66r2 from HIPAA Security Rule (§164.304)",
    "NISTIR 8040",
    "NISTIR 4734",
    "NISTIR 5153",
    "NISTIR 6192",
    "NISTIR 8149",
    "NIST IR 8278Ar1; NIST IR 8278r1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/user/"
}