Cyber Security Byelaw, 2077 (xi) “Spoofing” means pretending to be something else in an attempt to gain confidence, get access to a system, steal data or spread malware. (xii) “Unauthorized access” means gaining access to systems you are no authority or have no permission to access. (xiii) “Core Services” means the services which includes but not limited to the exposed services to the public internet such as Web, Email, Domain Name System (DNS), Billing, Customer Relationship Management (CRM) etc. (xiv) “Core System” means the system which provides core services. (xv) “Cloud Services” means services that provide on-demand availability of computer system resources and services, especially data storage (cloud storage) and computing power, without direct active management by the user. (xvi) “Critical Services” means the services identified as critical by the licensee. (xvii) “Next Generation Firewall” means Next-generation firewalls (NGFWs) are deep-packet inspection firewalls that move beyond port/protocol inspection and blocking to add application-level inspection, intrusion prevention, and bringing intelligence from outside the firewall. (xviii) “IP” means Internet Protocol based on Version 4 and Version 6. (xix) “Sensitive Data” means the data which includes but not limited to password, phone number, email address, mobile number, card number, PIN, security code, bank details etc. (xx) “Critical Emergency Response Team (CERT)" means an expert group that handles computer security incidents. (xxi) “Security Operation Center (SOC)" means a team and a facility dedicated to and organized to prevent, detect, assess and respond to cyber security threats and incidents, and to fulfill and assess regulatory compliance. (xxii) “Route Origin Authorization (ROA)” means a digitally signed object that provides a means of verifying that an IP address block holder has authorized an Autonomous System (AS) to originate routes to one or more prefixes within the address block. (xxiii) “Resource Public Key Infrastructure (RPKI)” means an Infrastructure to Support Secure Internet Routing that includes cryptographic method of signing records that associate a BGP (Border Gateway Protocol) route announcement with the correct originating AS number. (xxiv) “AAA” stands for Authentication, Authorization and Accounting. Page 2 of 12