The underlying security framework that lies beyond an enterprise's defined boundary, but supports its CS and CS-enabled products, its security posture and its risk management plan.
Sources:
CNSSI 4009-2022