4.3 Glossary This glossary lists terms that have a specific meaning in the context of this document. It does not list terms that are in common use in the ICT field, such as hardware, software, backup, etc. Term Definition Benchmarking A benchmark is a measure of comparison. ‘Benchmarking’ thus describes a comparative analysis of processes or outcomes. In this document, it explicitly refers to a comparison with organisations targeting a similar level of defence. Cyber attack Cyber attacks refer to all deliberate activities designed to impair the availability, integrity or confidentiality of data. Drive-by infection A drive-by infection refers to a computer being infected by malware (e.g. viruses, trojans, etc.), simply by visiting a website. Calling up such a website is sufficient to infect the computer. Hardware life cycle management Hardware life cycle management is a comprehensive approach to managing ICT hardware throughout its useful life. Host security Host security comprises all security measures implemented on the field device. These include firewalls and anti-virus software, for example. ICS network perimeter security Perimeter security refers to security at the point at which data is transferred from the corporate network to a public network such as the internet. Perimeter security is achieved by means of perimeter firewalls, which offer a strategic first line of defence against attacks. ICT infrastructure All elements of information and communications technology equipment which an organisation requires to perform its business processes. Examples include desktop PCs, mobile telephones, data centres, etc. Industrial control systems ‘Industrial control systems’ is a collective term for all of elements that are used to control and monitor facilities or industrial processes. An industrial control system typically comprises sensors, data centres, control centres, communication lines and industrial facilities. ‘Supervisory control and data acquisition system’ (SCADA) is used as a synonym for ‘industrial control system’ (ICS). Information security management system (ISMS) An information security management system (ISMS) is a company-wide management system which effectively ensures that the organisation’s target information security and continuity levels are maintained in the long term. Intrusion detection systems An intrusion detection system is a system which detects attacks on a computer system or network. The IDS may back up a firewall, or also run directly on the computer system being monitored. Minimum ICT standard 2018 41