Glossary

Core processes and services that are essential to delivering primary organisational outcomes or contributing to personnel health and safety.

A server that provides critical network or security services. For example, Microsoft Active Directory Domain Services domain controllers, Microsoft Active Directory Certificate Services Certification Authority servers, Microsoft Active Directory Federation Services servers and Microsoft Entra Connect servers.

A system comprising security-enforcing functions tailored to mitigate the specific security risks of accessing or transferring information between security domains.

A system capable of implementing comprehensive data flow security policies with a high level of trust between two or more differing security domains.

A solution, capability or control that applies across multiple domains rather than being specific to one.

A type of digital currency that uses encryption techniques to create and regulate units of online funds and is not controlled by a bank.

An algorithm used to perform cryptographic functions, such as encryption, integrity, authentication, digital signatures or key establishment.

An application designed to perform cryptographic functions.

A generic term for commercial cryptographic equipment and High Assurance Cryptographic Equipment.

An algorithm (the hash function) which takes as input a string of any length (the message) and generates a fixed length string (the message digest or fingerprint) as output. The algorithm is designed to make it computationally infeasible to find any input which maps to a given digest, or to find two different messages that map to the same digest.