All components of an information system to be authorized for operation by an authorizing official. This excludes separately authorized systems to which the information system is connected. Formerly known as "accreditation boundary".
Sources:
CNSSI 4009-2022
under authorization boundary
from
OMB Circular A-130 (2016)
NIST SP 800-161r1-upd1
[11/1/2024 errata update]
under authorization boundary
from
NIST SP 800-53 Rev. 5
NIST SP 800-37 Rev. 2
under authorization boundary
from
OMB Circular A-130 (2016)
NIST SP 800-53 Rev. 5
under authorization boundary
from
OMB Circular A-130 (2016)
NIST SP 800-53A Rev. 5
under authorization boundary
from
OMB Circular A-130 (2016)
See Authorization Boundary.
Sources:
NIST SP 800-37 Rev. 2