CYBER SECURITY STRATEGY OF MONTENEGRO 2018-2021 Data breach The unauthorised movement or disclosure of information on a network to a party who is not authorised to have access to, or see, the information. Internet A global computer network, providing a variety of information and communication facilities, consisting of interconnected networks using standardised communication protocols. Domain A domain name locates an organisation or other entity on the Internet with unique name registered in authorised institutions, so-called domain registries. Internet of Things The totality of devices (vehicles, buildings, television sets, cameras...) and other items embedded with electronics, software and sensors that communicate and exchange data over the Internet and have IP address. Domain Name System (DNS) A system of mapping numeric IP addresses on domain. Malware Malicious software, or code. Malware includes viruses, worms, Trojans and spyware. E-commerce Electronic commerce. Trade conducted, or facilitated by, the Internet. Network (computer) A collection of host computers, together with the sub-network or inter-network, through which they can exchange data. Encryption Cryptographic transformation of data (called “plaintext”) into a form (called “cipher text”) that conceals the data’s original meaning, to prevent it from being known or used. Patching Patching is the process of updating software to fix bugs and vulnerabilities. Incident management The management and coordination of activities to investigate, and remediate, an actual or potential occurrence of an adverse cyber event that may compromise or cause harm to a system or network. Incident response The activities that address the short-term, direct effects of an incident, and may also support short-term recovery. Industrial Control System (ICS) An information system used to control industrial processes, such as manufacturing, product handling, production and distribution, or to control infrastructure assets. Penetration testing Activities designed to test the resilience of a network or facility against hacking, which are authorised or sponsored by the organisation being tested. Ransomware Malicious software that denies the user access to their files by encrypting them. A ransom is paid for the return of files. Reconnaissance The phase of an attack where an attacker gathers information on, and maps networks, as well as probing them for exploitable vulnerabilities in order to hack them. Risk The potential that a given cyber threat will exploit the vulnerabilities of an information system and cause harm. Insider Someone who has trusted access to the data and information systems of an organisation and can pose cyber threat. Router Devices that interconnect logical networks by forwarding information to other networks based upon IP addresses. Integrity of information The property that information has not been changed accidentally, or deliberately, and is accurate and complete. SMS spoofing A technique which masks the origin of an SMS text message by replacing the originating mobile number (Sender ID) with alphanumeric text. It 42