Term:External Information System

From FISMApedia
Jump to: navigation, search

NIST SP 800-53A

External Information System (or Component)- An information system or component of an information system that is outside of the accreditation boundary established by the organization and for which the organization typically has no direct control over the application of required security controls or the assessment of security control effectiveness.

NIST SP 800-53r3

External Information System (or Component)- An information system or component of an information system that is outside of the authorization boundary established by the organization and for which the organization typically has no direct control over the application of required security controls or the assessment of security control effectiveness.