evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 12549 (2) Asset : Anything that carries value to an agency. (3) Attack : Attempt to destroy, expose, alter, disable, steal or gain unauthorized access to or make unauthorized use of an asset. (4) Authentication : Provision of assurance that a claimed characteristic of an entity is correct. (5) Authenticity : Property that an entity is what it claims to be. (6) Availability : Information Systems available to users at any given or specified period of time and being accessible and usable upon demand by an authorized entity. (7) Business Continuity : Processes or Procedures for ensuring continued business operations. (8) Confidentiality: Information is not made available or disclosed to unauthorized individuals, entities, systems or processes. (9) Certification: Certification is something provided by any standard bodies or by some form of external review after evaluating an agency’s information system infrastructure and information security management system. (10) Classified Information: It refers to the categories of information classified in accordance with the Security Regulations. (11) Control: It means managing risk in an agency including policies, procedures, guidelines, practices or organizational structures, which can be of administrative, technical, management related, or legal nature. Control is also used as a synonym for safeguard or countermeasure. (12) Control objective: Statement describing what is to be achieved as a result of implementing controls. (13) Corrective action: Action to eliminate the cause of a detected nonconformity or other undesirable situation. (14) Eavesdropping: Eavesdropping, an unauthorized access to information, is a kind of network attack by capturing packets while communication/transmission of information. (15) Exploit: A technique or code that uses a vulnerability to provide system access to the attacker.