Cyber incident Cyber resilience Cyber security Cyber threat Cyberspace e-commerce or electronic commerce Incident management Incident response An occurrence that actually or potentially poses a threat to a computer, internet-connected device, or network – or data processed, stored, or transmitted on those systems – which may require a response action to mitigate the consequences. The overall ability of systems and organisations to withstand cyber events and, where harm is caused, recover from them. The protection of connected systems (to include hardware, software and associated infrastructure), the data on them, and the services they provide, from unauthorised access, harm or misuse. This includes harm caused intentionally by the operator of the system, or accidentally, as a result of failing to follow security procedures or being manipulated into doing so. Anything capable of compromising the security of, or causing harm to, information systems and internet connected devices (to include hardware, software and associated infrastructure), the data on them and the services they provide, primarily by cyber means. The interdependent network of information technology infrastructures that includes the Internet, telecommunications networks, computer systems, internet connected devices and embedded processors and controllers. Trade conducted or facilitated by the Internet. The management and coordination of activities to investigate, and remediate, an actual or potential occurrence of an adverse cyber event that may compromise or cause harm to a system or network. The activities that address the short-term, direct effects of an incident, and may also support National Cyber Security Strategy 2018-2023 ‫ ٓلظٔال‬ٝ‫خ أ‬٤ِ‫ طشٌَ خطشح كؼ‬٢‫حُلخدػش حُظ‬ ‫ضس حُٔظظِش‬ٜ‫ حألؿ‬ٝ‫د أ‬ٞ‫ حُلخع‬٠ِ‫ػ‬ ‫ طٔض‬٢‫خٗخص حُظ‬٤‫ حُز‬ٝ‫ حُشزٌخص أ‬ٝ‫رخإلٗظشٗض أ‬ ‫ طِي‬٠ِ‫خ ػ‬ِٜ‫ ٗو‬ٝ‫خ أ‬ٜ٘٣‫ طخض‬ٝ‫خ أ‬ٜ‫ٓؼخُـظ‬ ‫ هذ طظطِذ خطش حعظـخرش‬٢‫حُظ‬ٝ ‫حألٗظٔش‬ .‫ػخس‬٥‫ ح‬ٝ‫حهذ أ‬ٞ‫ق ٖٓ حُؼ‬٤‫ُِظخل‬ ‫اٌذىادس اٌغُجشأُخ‬ ٠ِ‫حُٔئعغخص ػ‬ٝ ‫ش ُألٗظٔش‬٤ُ‫حُوذسس حإلؿٔخ‬ ٖٓ ٢‫حُظؼخك‬ٝ ‫ش‬٤ٗ‫زشح‬٤‫حُظؼخَٓ ٓغ حألكذحع حُغ‬ .‫هؼض‬ٝ ‫خ ارح‬ٛ‫أػشحس‬ ‫اٌّشؤخ اٌغُجشأُخ‬ ٌٕٞ‫ طظ‬٢‫ (حُظ‬٢ٗ‫زشح‬٤‫جش حُلؼخء حُغ‬٤‫ش ر‬٣‫كٔخ‬ ‫ش‬٤‫ حُظلظ‬٠٘‫حُز‬ٝ ‫خص‬٤‫حُزشٓـ‬ٝ ‫ضس‬ٜ‫ٖٓ حألؿ‬ ‫خ‬ٜ٤‫دس ك‬ٞ‫ؿ‬ُٞٔ‫خٗخص ح‬٤‫ًخكش حُز‬ٝ )‫خ‬ٜ‫حُٔشطزطش ر‬ ‫خ‬ٜ٤ُ‫ٍ ا‬ٞ‫ط‬ُٞ‫خ ٖٓ ح‬ٜٓ‫ طوذ‬٢‫حُخذٓخص حُظ‬ٝ ٝ‫ء حالعظخذحّ أ‬ٞ‫ ٖٓ ع‬ٝ‫ أ‬،٢ٗٞٗ‫ش هخ‬٤‫رشٌَ ؿ‬ ٚ‫غزز‬٣ ١‫حء ُؼشس حُٔظؼٔذ حُز‬ٞ‫ ع‬،‫حُؼشس‬ ‫ن‬٣‫ حُؼشس حُلخطَ رطش‬ٝ‫ أ‬،ّ‫ٓشـَ حُ٘ظخ‬ ٝ‫ش أ‬٤٘ٓ‫ـش ػذّ حطزخع حإلؿشحءحص حأل‬٤‫حُخطؤ ٗظ‬ ‫ـش حُظؼشع ُِخذحع روظذ حُظغزذ‬٤‫ر٘ظ‬ .‫س‬ًٞ‫رخُؼشس حُٔز‬ ٍٔ‫األِٓ اٌغُجشا‬ ‫ حُظغزذ‬ٝ‫ حألٖٓ أ‬٠ِ‫ش ػ‬٤‫ حُظؤػ‬ٌٚ٘ٔ٣ ‫ء‬٢‫ ش‬١‫أ‬ ‫ضس‬ٜ‫حألؿ‬ٝ ‫ٓخص‬ِٞ‫رخُؼشس ألٗظٔش حُٔؼ‬ ‫ضس‬ٜ‫ طشَٔ حألؿ‬٢‫حُظ‬ٝ( ‫حُٔظظِش رخإلٗظشٗض‬ )‫ش حُٔظظِش‬٤‫ش حُظلظ‬٤٘‫حُز‬ٝ ‫خص‬٤‫حُزشٓـ‬ٝ ٢‫حُخذٓخص حُظ‬ٝ ‫خ‬ٜ٤ِ‫دس ػ‬ٞ‫ؿ‬ُٞٔ‫خٗخص ح‬٤‫حُز‬ٝ َ‫عخث‬ٝ ‫ن‬٣‫ ػٖ ؽش‬٢‫رشٌَ أعخع‬ٝ ،‫خ‬ٜٓ‫طوذ‬ .‫ش‬٤ٗ‫زشح‬٤‫ع‬ ٍٔ‫اٌزهذَذ اٌغُجشا‬ ٠٘‫ٗش ٖٓ حُز‬ٌٞٓ ‫ش ٓظشحرطش‬٤ُٔ‫شزٌش ػخ‬ َٔ‫ طشظ‬٢‫حُظ‬ٝ ‫ٓخص‬ِٞ‫خ حُٔؼ‬٤‫ؿ‬ٌُٞٞ٘‫ش ُظ‬٤‫حُظلظ‬ ‫أٗظٔش‬ٝ ‫شزٌخص حالطظخالص‬ٝ ‫ حإلٗظشٗض‬٠ِ‫ػ‬ ‫حص حُٔظظِش رخإلٗظشٗض‬ٝ‫حألد‬ٝ ‫ذ‬٤‫حع‬ٞ‫حُل‬ ‫أٗظٔش‬ٝ )‫حُٔؼخُـخص حُٔذٓـش (حُٔؼٔ٘ش‬ٝ .ٌْ‫حُظل‬ ٍٔ‫اٌفضبء اٌغُجشا‬ َٜ‫ طغ‬٢‫ حُظ‬ٝ‫ طظْ ػزش حإلٗظشٗض أ‬٢‫حُظـخسس حُظ‬ .‫خ‬ٜ‫ُظ‬ٝ‫حإلٗظشٗض ٓضح‬ ‫اٌزجبسح اإلٌىزشؤُخ‬ ‫ع‬ٞ‫ه‬ٝ ‫ٓؼخُـش‬ٝ ١‫ن أٗشطش حُظلش‬٤‫ط٘غ‬ٝ ‫ادحسس‬ ‫ش حألػش‬٤‫ش عِز‬٤ٗ‫زشح‬٤‫ع كخدػش ع‬ٞ‫ه‬ٝ ٍ‫ حكظٔخ‬ٝ‫أ‬ ‫ طغزذ‬ٝ‫ شزٌش أ‬ٝ‫ ٗظخّ أ‬٠ِ‫ٌٖٔ إٔ طئػش ػ‬٣ .‫ٔخ حُؼشس‬ُٜ ‫ئداسح اٌذىادس‬ ‫شحص حُٔزخششس‬٤‫ٍ حُظؤػ‬ٝ‫ طظ٘خ‬٢‫حألٗشطش حُظ‬ ٟ‫ حُٔذ‬٠ِ‫خ ػ‬ٜ٘ٓ ٢‫دػْ حُظؼخك‬ٝ ‫ُِلخدػش‬ .‫ش‬٤‫حُوظ‬ ‫االعزجبثخ ٌٍذىادس‬ Page 26 of 29 2023 – 2018 ٢ٗ‫زشح‬٤‫ش ُألٖٓ حُغ‬٤٘‫ؽ‬ُٞ‫ش ح‬٤‫ـ‬٤‫حالعظشحط‬