Glossary

An asymmetric cryptographic scheme that incorporates at least two different components based on different mathematically hard problems. Generally, post-quantum traditional hybrid schemes are used to combine post-quantum cryptography and traditional cryptography such that defeating the scheme requires defeating each component.

Applications that may appear to serve a useful purpose but often perform actions that may adversely affect a computer’s performance. Also known as potentially unwanted applications.

The shell framework developed by Microsoft for administrative tasks such as configuration management and automation of repetitive jobs.

A method of implementing the framework in which the organisation selects a cyber security principle and applies it across multiple domains.

The ability of an individual or group to seclude themselves or information about themselves, and thereby express themselves selectively.

Settings which control how a user's data is shared with other people or systems. Privacy settings apply to web browsers and social networking services.

Provides a dedicated operating system for sensitive tasks and is protected from internet attacks and threat vectors.

Privileged accounts include privileged user accounts and privileged service accounts.

Privileged operating environments are those used for activities that require a degree of privileged access, such as system administration activities.

A user who can alter or circumvent a system’s security measures. This can also apply to users who could have only limited privileges, such as software developers, who can still bypass security measures.
A privileged user can have the capability to modify system configurations, account privileges, audit logs, data files or applications.