Zone Of Control

March 5, 2018

You are here:
< Back

NIST Definition

The three-dimensional space surrounding equipment that processes classified and/or sensitive information within which TEMPEST exploitation is not considered practical or where legal authority to identify and remove a potential TEMPEST exploitation exists.
SOURCE: CNSSI-4009

In cybersecurity, a “zone of control” refers to a specific network segment or area within an organization’s infrastructure where the organization has the highest level of security control and can actively monitor and manage access to systems and data. This essentially means that they have the most authority to define and enforce security policies within that area; often compared to a “controlled zone” where access is restricted and heavily monitored compared to less secure external networks.