The highest and lowest security levels that are permitted in or on an information system (IS,) system component, subsystem, or network.