Words and Expressions | Definition |
1-2 The Authority: | Communications and Information Technology Commission |
2-2 The Center: | Cybersecurity Operations Center at the Communications and Information Technology Commission. |
3-2 Service Provider: | Provider of telecommunications, information technology, or postal services in the telecommunications and information technology and postal sector in the Kingdom of Saudi Arabia. |
4-2 Cybersecurity: | It is the protection of networks, information technology systems, operational technology systems, and their components, including hardware and software, the services they provide, and the data they contain, from any breach, disruption, modification, unauthorized access, use, or exploitation. The concept of cybersecurity includes information security, electronic security, digital security, and similar terms. |
5-2 Cybersecurity Incident: | A breach of the security policy of a system aimed at affecting its integrity or availability and/or unauthorized access to it or attempts to access one or more systems. |
6-2 Vulnerability: | Any type of weakness in a computer system, its software or applications, or in a set of procedures, or in anything that may make cybersecurity susceptible to threats. |
7-2 Cyber Threat: | Any circumstance or event that may negatively impact the operations of an entity, possibly affecting its mission, functions, credibility, reputation, assets, or personnel by compromising one of its information systems through unauthorized access to information, destruction, disclosure, alteration, or denial of service, as well as the ability of the threat source to succeed in exploiting a specific information system vulnerability. This definition includes cyber threats. |
8-2 Cybersecurity Incident Response: | The process of dealing with an incident in a systematic manner aimed at reducing the impact of the incident to the lowest possible level while identifying and sharing indicators of compromise and detailed digital evidence, and preparing and delivering reports and recommendations related to the incident. |
9-2 Proactive Information (Threat Intelligence Sharing): | Provides organized and analyzed information about recent, current, and potential attacks that may pose a threat to the cybersecurity of the entity. |
10-2 Indicators of Compromise: | These are pieces of evidence and digital data that can identify malicious activity on a communications network or information system, which, when monitored, enable information security professionals to detect attacks and act quickly to mitigate damage by countering cyber attacks in their early stages. |
11-2 Attack: | The complex independence of computer systems, networks, and entities that rely on information and digital communication technology with the aim of causing harm. |
12-2 Attack Indicators: | A series of events and actions executed by the attacker to gain unauthorized access to a system or network before achieving their ultimate goal of exploiting vulnerabilities, stealing data, or conducting any other type of attack, which can be clarified by the security monitoring team to detect cyber threats before indicators of compromise. |
13-2 Security Vulnerability Assessment: | It is an assessment to identify weaknesses in an operational computer system, software, applications, or in a set of procedures, or in anything that may expose cybersecurity to threats. |
14-2 Threat Hypothesis (Threat Hypothesis): | It is a general conception of the mechanism of executing the threat that may assist in discovering different threat patterns in networks and systems when they exist. |
15-2 Threat Hunting: | The process of conducting an examination of systems and networks based on threat hypotheses aimed at detecting undiscovered indicators of compromise. |
16-2 Incident Alerts: | The process of conducting an examination of systems and networks based on threat hypotheses aimed at detecting undiscovered indicators of compromise. |
17-2 Response Entity: | The entity providing cybersecurity incident response services. |
18-2 Personal Data: | Any statement, regardless of its source or form, that can lead to the identification of a user specifically, or make them identifiable directly or indirectly, including but not limited to names, personal identification numbers, addresses, contact numbers, license and registration numbers, personal property numbers, bank account and credit card numbers, still or moving images of the user, and other personal data. |
19-2 Data Leakage: | Disclosure of data, or obtaining it, or enabling access to it without authorization or legal basis, whether intentionally or unintentionally. |
20-2 Personal Data Leakage: | Disclosure of personal data or its creation, publication, obtaining, or enabling access to it without legal basis, whether intentionally or unintentionally. |
21-2 Critical Incident: | An incident with a high impact at the national level or at the sector level. |
22-2 Initial Assessment of a Cybersecurity Incident: | A rapid analysis of the incident aimed at verifying the validity of the incident, determining its type, classifying it, collecting initial indicators of compromise, and an initial determination of the scope of impact from the incident. |