ISO/IEC 27000:2018 Information Technology – Security Techniques – Information Security Management Systems – Overview and Vocabulary (fifth edition) CNSS Instruction No. 4009 6 April 2015 National Information Assurance (IA) Glossary, (US) NISTIR 7298 Revision 3 , July 2019 Glossary of Key Information Security Terms ISO Committee on National Security Systems (CNSS) https://www.iso.org/standard/73906. html https://rmf.org/wpcontent/uploads/2017/10/CNSSI4009.pdf NIST https://csrc.nist.gov/publications/det ail/nistir/7298/rev-3/final Publisher Source ISO https://www.iso.org/standard/50341. html ISO https://www.iso.org/standard/46414. 1.1.63. Additional Guidance Reference Title Approved Products ISO/IEC 15408-1:2009 Information technology — Security techniques — Evaluation criteria for IT security — Part 1: Introduction and general model ISO/IEC 15408-2:2008 Information technology — Security techniques — Evaluation criteria for IT security — Part 2: Security html functional components ISO/IEC 15408-3:2008 Information technology — Security techniques — Evaluation criteria for ISO https://www.iso.org/standard/46413. html ASD https://www.cyber.gov.au/acsc/view- IT security — Part 3: Security assurance components AISEP Evaluated Products List all-content/epl-products Other Evaluated Products Lists NSA NCSC UK CSEC Common Criteria http://www.nsa.gov http://www.ncsc.gov.uk/ https://www.cse-cst.gc.ca https://www.commoncriteriaportal.or g/products Archiving of information Public Records Act 2005 (as amended) Archives New Zealand Parliamentary Counsel https://www.archives.govt.nz https://www.legislation.govt.nz/ Office Archives, Culture, and Heritage Reform Act 2000 (as amended) Parliamentary Counsel Office https://www.legislation.govt.nz/ Business continuity ISO 22301:2019 Security and Resilience - Business ISO Continuity Management Systems Requirements https://www.iso.org/standard/75106. html Cable security NZCSS 400 New Zealand Communications GCSB Security Standard No 400 (Document classified CONFIDENTIAL) CONFIDENTIAL document available on application to authorised personnel Cryptographic Security NZCSP 301 New Zealand Communications Security Policy No 301 (Document classified RESTRICTED) GCSB RESTRICTED document available on application to authorised personnel Emanation security 6 Version_3.5__January-2022

Select target paragraph3