Term Definition Compromised A system, database or even an individual data set is regarded as compromised if it is possible that data could have been manipulated and if the owner (or administrator) of the system has lost control over correct functioning or correct content. Critical infrastructure The spectrum of critical infrastructures spans nine sectors, divided into 27 sub-sectors (industries). The full list is available online at: https://www.babs.admin.ch/en/aufgabenbabs/ski/kritisch.html Legacy systems Legacy systems are out-of-date systems that, for whatever reason, can no longer be replaced. Such systems may present a particular risk, and thus require the appropriate action to ensure their security. Man-in-the-middle attacks A man-in-the-middle attack (MITM attack) is a form of attack used on ICT networks. The attacker places themselves either physically or – in most cases today – logically between the two communication partners, and their system takes complete control of the data traffic between two or more network users. They are thus able to read any information they choose, and even manipulate it. Mobile device configuration ‘Mobile device configuration’ refers to all technical measures and settings designed to protect data on mobile devices (smartphones, laptops, etc.), even if the device is physically lost. Phishing mail ‘Phishing’, derived from ‘fishing’ refers to attempts to collect a user’s personal data via fake websites, e-mails or text messages, the ultimate aim being identity theft. Security awareness programme The objective of a security awareness programme is to improve awareness of security issues, and the appropriate behaviours, among staff, partners, suppliers, etc. Security monitoring Security monitoring describes the process by which data flows and network activity in an organisation’s own network are observed continuously. The aim is to detect conspicuous behaviour at an early stage. Dedicated security monitoring systems are used to this end. Minimum ICT standard 2018 42