An assessment object that includes specific protection related pursuits or actions supporting an information system that involve people (e.g., conducting system backup operations, monitoring network traffic).
Source(s):
CNSSI 4009-2015
under activities (assessment)