An individual, process, or device causing information to flow among objects or a change to the system state.

Extended Definition: An active entity.

Adapted from: NIST SP 800-53 Rev 4., CNSSI 4009.

Source: NICCS™ Portal Cybersecurity Lexicon, National Initiative for Cybersecurity Careers and Studies ( as of 11 November 2015, Global Standards

Comments are closed.