Glossary

A document that describes the outcomes of a security control assessment and contributes to the development of a plan of action and milestones.

A collection of connection-specific parameters used for IPsec connections.

The duration a security association is valid for.

An act that leads to damage of a system or unauthorised access to the system.

An Australian Government interdepartmental committee responsible for the evaluation and endorsement of security equipment and services. The committee is chaired by the Australian Security Intelligence Organisation.

A safeguard implemented for a system or its operating environment to protect the confidentiality, integrity or availability of data.

A security assessment activity undertaken to assess security controls for a system and its environment to determine if they have been implemented correctly and are operating as intended.

An organisation’s cyber security strategy; system-specific security documentation; and any supporting diagrams, plans, policies, processes, procedures and registers.

A system or collection of systems operating under a consistent security policy that defines the classification, releasability and special handling caveats for data processed within the domain.

A weakness in a system that gives a threat agent the opportunity to mount an attack.