A computer process that is authorized (and, therefore, trusted) to perform security- relevant functions that ordinary processes are not authorized to perform.
Sources:
CNSSI 4009-2022
from
IETF RFC 4949 Ver 2