The defined scope of an information system being assessed, including all components authorized for operation, while excluding separately authorized interconnected systems. This boundary aligns with the CMMC Assessment Scope.
« Back to Glossary Index « Back to Glossary Index