Glossary

The level of security risk to which a system is exposed. A system with a strong security posture is exposed to a low level of security risk while a system with a weak security posture is exposed to a high level of security risk.

The likelihood and consequence of an event that could result in the compromise, loss of integrity or unavailability of systems, their resources or data, or deliberate harm to people.

Statements that communicate the expectations of an organisation’s senior management about their security risk tolerance. These criteria help an organisation identify security risks, prepare appropriate treatments and provide a benchmark against which the success of mitigations can be measured.

The process of identifying, assessing and taking steps to reduce security risks to an acceptable level.

An artefact of Common Criteria evaluations that specifies conformance claims, threats and assumptions, security objectives, and security requirements for an evaluated product.

Updates to the security on your system.

Security Equipment Guide

Any device or system that has the ability to perceive that it is not operating correctly and to make the necessary adjustments to restore itself to normal operation.

An email authentication method designed to detect forged sender addresses during the delivery of email.

Data that would cause damage to an organisation or an individual if compromised.