Definition of Terms In this policy and strategy, unless the context otherwise requires: Critical Information Infrastructures mean physical and digital assets, networks, services and information systems that, if an attack is inflicted on these infrastructures, would have a serious impact on public security and national interests of the country. Cyberspace means a virtual space that comprises interconnected information, information infrastructure, information systems, and human resource that turns information into knowledge and use it, and the institutional and social culture. Digital Identity means an online or networked identity adopted or claimed in cyberspace by an individual, organization, or electronic device. Digital Identity Protection means protecting the confidentiality and the integrity of information owned by the individuals, the citizens, or the institutions in cyberspace as well as protecting the common identity; it also includes preventing unauthorized access. Cyberbullying means any type of intimidation and similar acts committed through the internet and related electronic means. Cybercrime means a crime that is committed using information communication technologies and systems, especially the Internet. Cyber-attack means unauthorized access to data, data theft, spreading of malware, psychological warfare, and other cyber-attacks. Cyber Security Policy means a course of action to govern and manage cyber security. Cyber Security Strategy means how the cyber security policy's mission, objectives, and goals should be achieved; it is a calculated plan, method, and action to achieve the desired result. Data Privacy means the right to personal data privacy and protection which includes but is not limited to, protection against unauthorized access to personal information, against passing the information to the third party without the owner’s permission, against compromising the integrity of the information. iii