Which term defines the boundary around an organization's information systems for protection purposes?

• A. System Boundaries
• B. Data Center Boundaries
• C. Network Boundaries
• D. Security Perimeter

Answer: (A)

Defining what is included in the information system’s protection scope is about drawing its system boundary. This boundary marks what components—hardware, software, data, people, and processes—are part of the system and therefore subject to its security controls. System Boundaries is the precise term for this scope. Data Center Boundaries describe the physical location of the facility rather than the protection scope of the system. Network Boundaries focus on the reach of the network itself, which may exclude non-network assets like data, endpoints, or cloud services. Security Perimeter is related but broader; it represents the outer edge of the security domain, whereas the specific boundary around the organization’s information systems is most accurately called the system boundary.