A trusted process explicitly authorized to re-classify and re-label data in accordance with a defined policy exception. Untrusted or unauthorized processes are such actions by the security policy.
Sources:
NIST SP 800-53 Rev. 5
from
CNSSI 4009-2022