A definable perimeter encompassing all the critical functions in an INFOSEC product and separating them from all other functions within the product.
Sources:
CNSSI 4009-2022
from
NSA IASRD-001-2016 - adapted