Glossary

When a victim’s personal details are stolen and used to perpetrate crime, commonly fraud. Identity theft is a serious crime and can result in long-term and far-reaching negative consequences for victims.

Internet Engineering Task Force

Internet Key Exchange

Emails that attempt to impersonate a trusted individual or company in an attempt to gain access to corporate finances or data.

A scam where a dishonest individual will try to convince you to make a payment or give personal or financial details by claiming to be from a trusted organisation.

Authentication services operated independently within the OT environment to reduce reliance on non-OT and external systems.

A set of statements used to inform expert judgement about whether an action should be rated not effective, partially effective or effective.

Control systems and associated instrumentation used to efficiently operate and/or automate industrial processes. Industrial Control Systems include supervisory control and data acquisition (SCADA) systems, distributed control systems (DCS), and other smaller control system configurations such as programmable logic controllers (PLC).

The protection of information from unauthorised access, use, disclosure, disruption, modification or destruction in order to provide confidentiality, integrity and availability.

An ASD publication outlining a cybersecurity framework that organisations can apply, using their risk management framework, to protect their systems and data from cyberthreats.