Glossary

Confirmation that stakeholder requirements for the intended use of operating systems, applications, IT equipment or OT equipment have been met.

An access method for cyber operations.

Confirmation that design or compliance requirements for operating systems, applications, IT equipment or OT equipment have been met.

Network devices and other IT equipment grouped logically based on resources, security or business requirements instead of their physical location.

A security measure designed to prevent known exploitation attempts against known vulnerabilities in web applications, typically via the use of a network-based intrusion prevent system or a web application firewall.

A network that maintains privacy through a tunnelling protocol and security procedures. VPNs may use encryption to protect network traffic.

Simulation of hardware or software resources.

A type of malware. Viruses spread on their own by attaching code to other programs, or copying themselves across systems and networks.

The procedures and capabilities to detect, analyse and respond to cyber security events and incidents.

Vital OT are the subset of critical systems that are unacceptable to have offline for an extended period, from the perspective of the safe provision of a minimum viable product.