Glossary

An IPsec mode that provides a secure connection between two endpoints by encapsulating an entire IP packet.

A form of multi-factor authentication (MFA) by combining two different pieces of evidence. See also Multi-Factor Authentication (MFA).

The technical term for the web address (location) of an internet resource such as a website or an image within a website.

Computer code with known security weaknesses.

Unprivileged accounts include unprivileged user accounts and unprivileged service accounts.

Unprivileged operating environments are those used for activities that do not require privileged access, such as reading emails and browsing the web.

User accounts that do not have the capability to modify system configurations, account privileges, event logs or security configurations.

Most often refers to a free Wi-Fi network, like at a café or shop.

An area not certified to the physical security requirements for a Security Zone Two to Security Zone Five area, as defined in the Department of Home Affairs’ Protective Security Policy Framework policy, to allow for the processing or storage of classified data.

Any IT equipment that an organisation does not trust. For example, unknown IT equipment (which might belong to malicious actors), or an uncontrolled personal mobile device of an employee.