Glossary

Hardware, software and supporting infrastructure used for the processing, storage or communication of data.

Any device that can process, store or communicate data within IT environments, such as computers, multifunction devices, network devices, smartphones, electronic storage media and smart devices.

An initiative of ASD designed to register suitably qualified individuals to carry out security control assessments for systems.

Devices such as mice, keyboards and pointing devices that have an infrared communications capability.

Any person that has, or had, authorised logical or physical access to a system and its resources.

An insider that performs, or attempts to perform, damaging activities (either intentionally or unintentionally) to a system or its resources. Some organisations may choose to exclude unintentional damage to systems and their resources (often referred to as negligent or accidental damage) from their definition of insider threat in order to focus on insiders with malicious intent (often referred to as malicious insiders).

The assurance that data has been created, amended or deleted only by authorised entities.

The property of your mind or proprietary knowledge. It can be an invention, trade mark, design, brand or the application of your idea.

The back and forth dialog between the user and the computer.

Authentication that involves direct interaction by a human user.