Glossary

Control systems and associated instrumentation used to efficiently operate and/or automate industrial processes. Industrial Control Systems include supervisory control and data acquisition (SCADA) systems, distributed control systems (DCS), and other smaller control system configurations such as programmable logic controllers (PLC).

The protection of information from unauthorised access, use, disclosure, disruption, modification or destruction in order to provide confidentiality, integrity and availability.

An ASD publication outlining a cybersecurity framework that organisations can apply, using their risk management framework, to protect their systems and data from cyberthreats.

Hardware, software and supporting infrastructure used for the processing, storage or communication of data.

Any device that can process, store or communicate data within IT environments, such as computers, multifunction devices, network devices, smartphones, electronic storage media and smart devices.

An initiative of ASD designed to register suitably qualified individuals to carry out security control assessments for systems.

Devices such as mice, keyboards and pointing devices that have an infrared communications capability.

Any person that has, or had, authorised logical or physical access to a system and its resources.

An insider that performs, or attempts to perform, damaging activities (either intentionally or unintentionally) to a system or its resources. Some organisations may choose to exclude unintentional damage to systems and their resources (often referred to as negligent or accidental damage) from their definition of insider threat in order to focus on insiders with malicious intent (often referred to as malicious insiders).

The assurance that data has been created, amended or deleted only by authorised entities.