Definitions The terms used in this document, refer to the following meanings: Information systems: The systems involved in providing services, processes and data by means of information and communication technologies. Cyber space: The environment, which consists of information systems that span across the world including the networks that interconnect these systems Information systems of the government: The information systems, which belong to and/or are operated by the Government of the Islamic Republic of Afghanistan National cyber space: The environment, that consists of the information systems that belong to public organizations, natural and legal persons, Confidentiality: Authorized persons or systems only can access information systems and data, and the confidential information pertaining to information systems or confidential information in the system will not be disclosed by unauthorized persons or systems. Integrity: Information systems and information can be changed by authorized persons or systems only, Accessibility: Authorized persons and transactions can access information systems and the information therein within the required time and quality, Critical information infrastructures: The infrastructures which host the information systems that can cause, Loss of lives, large scale economic damages, Security vulnerabilities and disturbance of public order at national level when the confidentiality, integrity or accessibility of the information they process is compromised, IMPACT: International Multilateral Partnership Against Cyber Threats Cyber incident: Violation of confidentiality, integrity or accessibility of information systems or of the information being processed by these systems, Cyber security: Protection of information systems that protect the cyber space from attacks, ensuring the confidentiality, integrity and accessibility of the information being processed in this space, detection of attacks and cyber security incidents; putting into force the countermeasures against these incidents and then putting these systems back to their original states prior to the cyber security incident. National Cyber Security: The cyber security of all services, processes and data –and the systems involved in provisioning of these- provided by the information and communication technologies in the national cyber space. Information  Systems  Security  Directorate  -­‐  MCIT