also includes the people that interact with, oversee, regulate, or otherwise observe the system, and the
processes, procedures, policies that govern and in uence the operations of the system’s technological
and non-technological elements. For purposes of this document, unless otherwise stated, “system”
refers to the technological elements of the system, and excludes the non-technological elements.