Security Domains - NIST

Definition(s):

  A domain that implements a security policy and is administered by a single authority.
Source(s):
CNSSI 4009-2015 from CNSSP 24CNSSI 1253F Attachment 3
NIST SP 800-137 under Security Domain from CNSSI 4009
NIST SP 800-172 from CNSSI 4009-2015 – Adapted
NIST SP 800-172A from CNSSI 4009-2015 – Adapted
NIST SP 800-53 Rev. 5 from CNSSI 4009-2015
NIST SP 800-171 Rev. 2 from CNSSI 4009 – Adapted

An environment or context includes a set of system resources and a set of system entities that have the right to access the resources as defined by a standard security policy, security model, or security architecture. See Security Domain.
Source(s):
NIST SP 800-53 Rev. 5 under domain

A domain within which behaviors, interactions, and outcomes occur and that is defined by a governing security policy. Note: A security domain is defined by rules for users, processes, systems, and services that apply to activity within the domain and activity with similar entities in other domains.
Source(s):
NIST SP 800-160 Vol. 1

A system or subsystem that is under the authority of a single trusted authority. Security domains may be organized (e.g., hierarchically) to form larger domains.
Source(s):
NIST SP 800-57 Part 1 Rev. 5 under Security domain

An environment or context that includes a set of system resources and a set of system entities that have the right to access the resources as defined by a standard security policy, security model, or security architecture. See Security Domain.
Source(s):
CNSSI 4009-2015 under domain

A domain within which behaviors, interactions, and outcomes occur and that is defined by a governing security policy.  Note: A security domain is defined by rules for users, processes, systems, and services that apply to activity within the domain and activity with similar entities in other domains.
Source(s):
NIST SP 800-160 Vol. 1