Environment of Operation

The physical surroundings in which an information system processes, stores, and transmits information.
SOURCE: SP 800-37; SP 800-53A

The physical, technical, and organizational setting in which an information system operates, including but not limited to: missions/business functions; mission/business processes; threat space; vulnerabilities; enterprise and information security architectures; personnel; facilities; supply chain relationships; information technologies; organizational governance and culture; acquisition and procurement processes; organizational policies and procedures; organizational assumptions, constraints, risk tolerance, and priorities/trade-offs).
SOURCE: SP 800-30