Glossary

Making an unsolicited visit or phone call to someone, often in an attempt to sell goods or services.

A set of organisational and technical attributes and processes that employs human, physical and information resources to solve problems and accomplish missions.

A subset of IT equipment which contains cryptographic components.

An International Organization for Standardization (ISO) standard for information security (INFOSEC) evaluations. The governing document provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems.

An international agreement which facilitates the mutual recognition of Common Criteria evaluations by certificate-producing schemes.

The actions and associated activities that are used to exchange information, provide instructions, give details, etc. Communications include using such tools as phone calls, emails, user guides, in-person classes, instruction manuals, webinars, written instructions, videos, quizzes, frequently asked questions (FAQ) documents, and any other type of tool for such information exchanges.

The security controls applied to protect telecommunications from unauthorised interception and exploitation, as well as ensure the authenticity of such telecommunications

An alternative control that delivers the same intended security outcome as a primary action, where that action cannot be applied.

The disclosure of information to unauthorised persons, or a violation of the security policy of a system in which unauthorised intentional or unintentional disclosure, modification, destruction or loss of an object may have occurred.

A programmable electronic device designed to accept data, perform high speed prescribed mathematical and logical operations, and display the results.