Glossary

In the context of technology, an overarching term used to refer to applications, IT equipment, OT equipment, services and data. Such assets may also be referred to as technology assets.

Cryptographic algorithms where two different keys are used, commonly a private and a public key. Also known as 'public key cryptographic algorithms'.

Advanced Technology Attachment

The reachable points through which a system could be accessed, manipulated or compromised. This can include hardware and software interfaces, network services, and application programming interfaces.

The process of assessing the source, perpetrator or sponsor of malicious activity. Statements of attribution often use probabilistic language and indicate the level of confidence in the assessment.

A chronological record of system activities including records of system access and operations performed. See also event log.

A chronological record that reconstructs the sequence of activities surrounding, or leading to, a specific operation, procedure or event.

Data not to be passed to, or accessed by, foreign nationals.

Data not to be passed to, or accessed by, foreign nationals, with the exception of seconded foreign nationals.

A program that evaluates products in order to protect systems and data against cyberthreats. These evaluation activities are certified by the Australian Certification Authority.