The detailed security description of the physical structure, equipment component, location, relationships, and general operating environment of an information system (IS. )