An element which is or contains information and communications technology (ICT), including hardware, software, or firmware, whether custom, commercial, or otherwise developed, and which delivers or protects mission critical functionality of a system of which, because of the system's design, may introduce vulnerability to a mission critical function of a system.
Sources:
CNSSI 4009-2022
from
CNSSD No. 505 - adapted