Glossary

User accounts that have the capability to modify system configurations, account privileges, event logs or security configurations. This also applies to user accounts that may only have limited privileges but still have the ability to bypass some security controls.

A generic term used to describe software or hardware.

An area that has been authorised to process, store or communicate PROTECTED data. Such areas are not necessarily tied to a specific level of security zone.

A document that stipulates the security functionality that must be included in a Common Criteria evaluation to meet a range of defined threats.
Protection Profiles also define the activities to be taken to assess the security function of an evaluated product.

An administrative label assigned to data that not only shows the value of the data but also defines the level of protection to be provided.

A cyber security responsibility implemented and operated by the cloud service provider that the customer verifies through assurance.

A security capability supplied by the cloud service provider that the customer must enable, configure and operate.

Protective Security Circular

The Australian Government's Protective Security Policy Framework

A computer available in public areas. Some places where public computers may be available are libraries, schools or government facilities.