As used in this subpart, the following definitions shall apply:
Adequate security means, in accordance with OMB Circular A-130, Management of Federal Information Resources, Appendix 3 (Security of Federal Automated Information Resources), security commensurate with the risk and magnitude of harm resulting from the loss, misuse, or unauthorized access to or modification of information.
Federal information means, in accordance with OMB Circular A-130, Management of Federal Information Resources, Appendix 3 (Security of Federal Automated Information Resources), information created, collected, processed, disseminated, or disposed of by or for the Federal Government.
Federal information system means an information system used or operated by an executive agency, by a contractor of an executive agency, or by another organization on behalf of an executive agency.
Information means, in accordance with OMB Circular A-130, Management of Federal Information Resources, Appendix 3 (Security of Federal Automated Information Resources), any communication or representation of knowledge such as facts, data, or opinions in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual forms.
Information infrastructure means the underlying framework that information systems and assets rely on in processing, transmitting, receiving, or storing information electronically.
Information security means protecting information and information systems from unauthorized access, use, disclosure, disruption, modification or destruction in order to provide-
(1) Integrity, which means guarding against improper information modification or destruction, and includes ensuring information non-repudiation and authenticity;
(2) Confidentiality, which means preserving authorized restrictions on access and disclosure, including means of protecting personal privacy and proprietary information;
(3) Availability, which means ensuring timely and reliable access to and use of information; and
(4) Privacy, which means regulating the appropriate collection, maintenance, use, and dissemination of personal information by Federal executive branch agencies. It essentially prohibits disclosure without consent.
Information system means a discrete set of information resources organized for the collection, processing, maintenance, transmission, and dissemination of information, in accordance with defined procedures, whether automated or manual.
Information technology includes computers, ancillary equipment (including imaging peripherals, input, output, and storage devices necessary for security and surveillance), peripheral equipment designed to be controlled by the central processing unit of a computer, software, firmware and similar procedures, services (including support services) and related resources.
