Glossary
A
A program under which evaluations are performed by impartial bodies against the Common Criteria. The results of these evaluations are then certified by the Australian Certification Authority within the Australian Signals Directorate (ASD).
An Australian government statutory agency responsible for foreign intelligence, cyber security and offensive cyber operations in support of the Australian Government and the Australian Defence Force.
Cryptography suitably implemented using an ASD-Approved Cryptographic Algorithm, an ASD-Approved Cryptographic Protocol, a high assurance cryptographic algorithm or a high assurance cryptographic protocol.
The Australian Government's lead for cybersecurity. The ASD's ACSC is part of the Australian Signals Directorate.
Verifying the identity of a user as a prerequisite to allowing access to a system and its resources.
A digital object created or issued during authentication that represents the authenticated identity of a user, or maintains an authenticated session. For example, authentication assertions, authentication tokens and session cookies.
A protocol used in Internet Protocol Security (IPsec) that provides data integrity and data origin authenticity but not confidentiality.
A cyber security documentation package that includes a system’s system security plan, cyber security incident response plan, change and configuration management plan, continuous monitoring plan, security assessment report, and plan of action and milestones. The authorisation package is provided to a system’s authorising officer to assist them in making an informed decision as to whether the security risks associated with the system’s operation are acceptable or not.
The official management decision by a senior executive or senior executives to authorise a system to operate based on the acceptance of the security risks associated with its operation.
An executive with the authority to formally accept the security risks associated with the operation of a system and to authorise it to operate.