| Description | This zone encompasses the office environment, including end-user workstation equipment, LAN networks, and network printers within an organization. This end-user system environment is referred to as the "client." This domain is classified as semi-trusted due to the large number of connections and its relatively high vulnerability to breaches. Security policy compliance in this "office domain" is typically limited. If organizations allow employees to work within an office environment using systems in the development, test, acceptance, or management zones, additional measures must be implemented to ensure the required logical separation and segregation of duties for security levels. These measures include both technical and organizational controls. |