In accordance with Common Criteria, an information system, part of a system or product, and all associated documentation, that is the subject of a security evaluation.
Sources:
CNSSI 4009-2022
Set of software, firmware and/or hardware possibly accompanied by guidance.
Sources:
CNSSI 4009-2022
from
Common Criteria v3.1, Rev. 5