6 APPENDIX (A) Cyber Security Definitions and Terminology Cyber security: is the collection of tools, policies, security concepts, security safeguards, guidelines, risk management approaches, actions, training, best practices, assurance and technologies that can be used to protect the cyber environment and organization and user’s assets. Organization and user’s assets include connected computing devices, personnel, infrastructure, applications, services, telecommunications systems, and the totality of transmitted and/or stored information in the cyber environment. Cybersecurity strives to ensure the attainment and maintenance of the security properties of the organization and user’s assets against relevant security risks in the cyber environment. The general security objectives comprise Availability, Integrity, which may include authenticity and nonrepudiation, and Confidentiality. Cyberspace or cyberspace environment: is figuratively the virtual space for computer systems and electronic networks, where information stored electronically and directly connect to the network, it is an intangible space including data such as personal information, electronic transactions, intellectual property and other related topics. from Government, companies or institutions. Any crashes, destruction or damaging in those sectors can harm the security of the State, the business of institutions or the economic situation, and include all the following: Oil sector. Military sector. Energy sector and electricity and water. Financial sector. Communications, telecommunication and information technology sector. Transport sector. Health sector. Other government entities. The infrastructure: is the physical assets, systems, machinery or equipment used to connect computers, it is vital to the State of Kuwait, and in any event, it had been damaged or destroyed, then a serious impact may occur on business of institutions, economy or security of the State. Risk management: it is a continuous process of identifying potential risks, analysis and evaluation of their impact and maintained the risk at an acceptable level. Risk management enables organizations to define policies and controls which are the most likely to protect the assets. Hackers and criminals of information Vital sectors for the State of Kuwait: is technology: they are professionals earn their the service or productive sectors of the state living from their work, or amateur admirers in presenting their technical skills, these criminals and hackers take several forms of cyberattacks 33