Sharing Indicator: White Essential Cybersecurity Controls Terminology Definition Closed-Circuit Television CCTV Closed-Circuit Television (CCTV), also known as video surveillance, is the use of video cameras to transmit a signal to a specific place, on a limited set of monitors. The term is often applied to those used for surveillance in areas that may need monitoring where physical security is needed. A model for enabling on-demand network access to a shared pool of configurable IT capabilities/resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal operation management effort or service provider interaction. It allows users to access technology-based services from the cloud without knowledge of, expertise with, or control over the technology infrastructure that Cloud Computing supports them. The cloud computing model is composed of five essential characteristics: on-demand self-service, ubiquitous network access, location independent resource pooling, rapid elasticity and measured service. There are three types of cloud computing services delivery models: Cloud Software as a Service (SaaS), Cloud Platform as a Service (PaaS), and Cloud Infrastructure as a Service (IaaS); Based on the enterprise access for cloud computing, there are four models: Private Cloud, Community Cloud, Public Cloud, and Hybrid Cloud. Disclosure of or obtaining information by unauthorized persons, which are unauthorized to be leaked or obtained, or violation of the cybersecurity policy of the organization through Compromise disclosure, change, sabotage or loss of anything, either intentionally or unintentionally. The expression “compromise” means disclosure of, obtaining, leaking, altering or use of sensitive data without authorization (including cryptographic keys and other critical cybersecurity standards). Organizational information (or data) that is considered highly critical and sensitive as per the organization’s data classification, which it has prepared to be used by the organization itself or other specific organizations. One way to determine the classification of such Confidential Data/ Information type of information/data is through assessing the impact from unauthorized disclosure, access, loss or damage. Impacts could be financial or reputational on the organization or customers, impact on the lives of people related to the disclosed information, impact and harm on the national security, economy or capabilities. Confidential Data/Information includes all information that if disclosed, lost or damaged in an unauthorized manner, there would be legal consequences. Confidentiality Maintaining authorized restrictions on access to and disclosure of information, including means of protecting privacy/personal information. These are the assets (i.e., facilities, systems, networks, processes, and key operators who operate and process them), whose loss or vulnerability to security breaches may result in: Critical National Infrastructure (CNI) • Significant negative impact on the availability, integration or delivery of basic services, including services that could result in serious loss of property and/or lives and/or injuries, alongside observance of significant economic and/or social impacts. • Significant impact on national security and/or national defense and/or state economy or national capacities. Document Classification: Unclassified 31