Definitions National Cybersecurity Policy Definitions In the context of this Policy: Computer Incident Response Team (CIRT) means a team of dedicated information security specialists that prepares for and responds to cybersecurity incidents; Critical Information Infrastructure means all ICT systems, data systems, databases, networks (including people, buildings, facilities, and processes), that are fundamental to the effective operation of Zambia; Cyber means the use, simulated environment or state of connection or association with electronic communications or networks including the internet; Cybercrime ” means illegal acts, the commission of which involves the use of information and communication technologies; Cybersecurity means the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies that can be used to protect the cyber environment and organisation and user assets; Cyberspace means physical and non-physical terrain created by and/or composed of some of all the following: computers, computer systems, networks, and their computer programmes, computer data, content data, traffic data, and users; Cyber resilience means the ability to prepare for, respond to and recover from cyber-attacks; Cyber warfare ” means actions by a nation/state to penetrate another nation’s computer and networks for purposes of causing damage or disruption; Digital Financial Service (DFS) means financial services accessed and delivered through digital channels i.e. internet, mobile, ATMs, POS terminals etc and include payments, credit, savings, remittances and insurance; Electronic commerce (e-commerce) also known as internet commerce means the buying and selling of goods and services using the internet, and the transfer of money and data to execute these transactions; means a transfer of signs, signals, writings, images, sounds, data or intelligence of any nature transmitted in whole or in part by radio, electromagnetic, photo-electronic or photo-optical system but does not include- Electronic Communication a. b. c. d. Any wire or direct oral communication; Any communication made through a tone – only paging device; Any communication from a tracking device; or Electronic funds transfer information stored by a financial institution in a communication system used for electronic storage and transfer of funds. Electronic Services (e-services) means the provision of service using electronic means or via the Internet; Information and Communication Technology mean the application of modern communication and computing technologies to the creation, management and use of information through utilising of hardware, software, networks and media for the collection, storage, processing, transmission and presentation of information and related services; Information society means people-centred, inclusive and development-oriented information, where everyone can create, access, utilise and share information and knowledge, enabling individuals, communities and people to achieve their full potential in promoting their sustainable development and improving the quality of their life; and Malware means malicious software, and its programming (code, scripts, active content, and other software) designed to disrupt or deny operation, gather information that leads to loss of privacy or exploitation, gain unauthorized access to system resources, and other abusive behaviour. www.mtc.gov.zm 4