Glossary

A list of entities that are not considered trustworthy and are blocked or denied access. Previously known as ‘blacklist’.

A wireless technology standard used for exchanging data between fixed and mobile devices over short distances using short-wavelength UHF radio waves.

A fake request

A program that performs automated tasks. In a cyber security context, a malware-infected device that carries out tasks set by someone other than the device's user or owner.

A botnet is a network of devices infected by malware and controlled remotely by a malicious actor.

Systems positioned at network boundaries that broker connectivity between internal and external environments, including internet services and edge devices.

When data is lost or subjected to unauthorised access, modification, disclosure, or other misuse or interference. Also referred to as a ‘data spill’.

A cybersecurity incident that results in unauthorised access to data, applications, services, networks and/or devices by bypassing their underlying security mechanisms.

An emergency account reserved for exceptional situations where normal access methods are unavailable.

An organisational policy allowing employees and students to use their personal electronic devices (PEDs) for work and educational purposes. These devices connect to and use the agency’s network, data and resources, usually with conditions of information and communications technology (ICT) security on the device having to be in place before doing so.