Glossary

A protocol which allows the encryption and signing of email messages.

An area certified to the physical security requirements for a Security Zone Two to Security Zone Five area, as defined in the Department of Home Affairs’ Protective Security Policy Framework.

An activity designed to provide assurance in the security posture of a system and its operating environment. Security assessments can include security control assessments, vulnerability scanning, vulnerability assessments and penetration tests.

A document that describes the agreed scope, type and extent of assessment activities as part of a security control assessment.

A document that describes the outcomes of a security control assessment and contributes to the development of a plan of action and milestones.

A collection of connection-specific parameters used for IPsec connections.

The duration a security association is valid for.

An act that leads to damage of a system or unauthorised access to the system.

An Australian Government interdepartmental committee responsible for the evaluation and endorsement of security equipment and services. The committee is chaired by the Australian Security Intelligence Organisation.

A safeguard implemented for a system or its operating environment to protect the confidentiality, integrity or availability of data.