DoD Instruction 8500.2 - Common Access Card (CAC)

DODI 8500.2, February 6, 2003
E2. ENCLOSURE 2
DEFINITIONS
E2.1.1. Application. Software program that performs a specific function directly
for a user and can be executed without access to system control, monitoring, or
administrative privileges. Examples include office automation, electronic mail, web
services, and major functional or mission software programs (DoD Directive 8500.1,
reference (a)).
E2.1.2. Authorized User. Any appropriately cleared individual with a requirement
to access a DoD information system in order to perform or assist in a lawful and
authorized governmental function (reference (a)).
E2.1.3. Common Criteria. The International Common Criteria for Information
Technology Security Evaluation (CC) defines general concepts and principles of
information technology (IT) security evaluation and presents a general model of
evaluation. It presents constructs for expressing IT security objectives, for selecting
and defining IT security requirements, and for writing high-level specifications for
products and systems (reference (j)).
E2.1.4. Community Risk. Probability that a particular vulnerability will be
exploited within an interacting population and adversely impact some members of that
population (reference (a)).
E2.1.5. Computer Network. The constituent element of an enclave responsible
for connecting computing environments by providing short-haul data transport
capabilities, such as local or campus area networks, or long-haul data transport
capabilities, such as operational, metropolitan or wide area and backbone networks
(reference (a)).
E2.1.6. Computing Environment. A computer workstation or server (host) and its
operating system, peripherals, and applications (reference (a)).
E2.1.7. Computing Facility. A room, building, or section of a building that houses
key IT assets, such as application servers, network management servers, domain name
servers, switches, firewalls, routers, and intrusion detection systems. Computing
facilities have physical and environmental security requirements identified in IA
controls that focus on both the availability and confidentiality of the information
processed. (See also "facility.")
15 ENCLOSURE 2