All components/devices of an information system (IS) to be accredited. Separately accredited components generally are not included within the perimeter.