Glossary

A document that describes the plan for responding to cyber security incidents.

An enduring cyber security objective drawn from the ASD information security manual.

The use of the internet or other electronic means to stalk or harass an individual, group or organisation.

The suppliers, manufacturers, distributors and retailers involved in the design, manufacture, storage, delivery, installation, operation, maintenance and decommissioning of products and services utilised within an organisation's IT and OT environments.

Any circumstance or event with the potential to harm systems, applications or data

The use of computer technology to disrupt the activities of a state or organisation, especially the deliberate disruption, manipulation or destruction of information systems for strategic, political or military purposes.

A computer code used, or designed to be used, to cause physical, functional, or mental harm to structures, systems, or people. The term is contentious among the international policy and legal communities, and there is an absence of agreement surrounding its connotations and implications. See also exploit.

Crimes directed at computers, such as illegally modifying electronic data or seeking a ransom to unlock a computer affected by malicious software. It also includes crimes where computers facilitate an existing offence, such as online fraud or online child sex offences.

The interdependent network of information technology infrastructures which includes the internet, telecommunications networks, computer systems, and embedded processors and controllers in critical industries.