Financial services - services in the area of banking, funds transfer, securities market, investment fund shares, insurance, leasing and factoring. Government information infrastructure - consists of the common government base for secure information exchange and information exchange tools such as metaregistry, technical standards, classifications, public registries, NIAS, the e-Citizens system, and the government information infrastructure networks HITRONet and CARNet. Identification and authentication system - system for establishing and verifying the identity of individuals, devices or services in information systems. Information - different groups of electronic records which are of value to the users that handle them. Information security - the state of confidentiality, integrity and availability of information, achieved by the application of appropriate security measures. Internet - global network connecting various internet networks based on the TCP/IP protocol (such as CARNet or HITRONet in Croatia). Protected information - information which, due to its content, has special importance to the values protected in a democratic society, for which reason it is recognised by the state as classified information, unclassified information, personal data or trade secret, and to which specific handling requirements apply in relation to information characteristics such as confidentiality, integrity, availability and privacy. Protected information processing - every action or set of actions performed on protected information, such as collection, recording, organising, storing, adaption or alteration, withdrawal, consultation, usage, transmission, publishing, or making it otherwise available, alignment or combining, blocking, erasure or destruction, and performing logical, mathematical and other operations on such information. Protected information processors - individuals or legal entities, state authorities or other bodies that process protected information on behalf of the entity responsible for protected information. Security measures - general rules of information protection implemented at physical, technical or organisational level. Sensitive information - groups of information used only for official purposes, or groups of information protected by appropriate regulations, but not having the characteristic of being secret (e.g. personal data or unclassified information, i.e. marked information for official use only). 30 of 31