Cybersecurity Guidelines for E-commerce Consumers Sharing Indicator: White Appendix A: Terms and Definitions The table below highlights some of the terminologies contained herein, and the meanings ascribed thereto. Term Definition Attack Any kind of malicious activity that attempts to achieve unauthorized access, collection, disabling, prevention, destruction or sabotage of the information system resources or the information itself. Backup Files, devices, data and procedures available for use in case of failure or loss, or in case of deletion or suspension of their original copies. Cybersecurity According to the Royal Decree number 6801, dated 11/2/1439H, cybersecurity is the protection of networks, IT systems, operational technologies systems and their components of hardware and software, their services and the data they contain, from any penetration, disruption, modification, access, use or unauthorized exploitation. The concept of cybersecurity also includes information security and digital security. E-commerce Service Provider Merchant (person who is bound by commercial registration and using e-commerce) or practitioner (person who is not bound by commercial registration but using e-commerce). A protocol that uses encryption to secure web pages and data Hyper Text Transfer Protocol when they are transmitted over the network. It is a secure version Secure (HTTPS) of the Hypertext Text Transfer Protocol (HTTP). 16 Incident A compromise through violation of cybersecurity policies, acceptable use policies, practices incident or cybersecurity controls or requirements. Phishing The attempt to obtain sensitive information such as usernames, passwords, or credit card details, often for malicious reasons and intentions, by disguising as a trustworthy organization in email, text or social media messages. Document Classification: Open