Glossary

3 entries

practitioner hardening supply-chain

Browser extension supply chain

Chrome and Edge auto-update means a bought extension can turn hostile overnight. Inventory, least privilege, and remove what you do not need.

practitioner au-compliance IR supply-chain

CIRMP annual report

The board-approved annual attestation for a Critical Infrastructure Risk Management Program. Due within 90 days after the Australian financial year ends.

practitioner hardening supply-chain

SBOM and build-pipeline checklist

Software bill of materials plus the CI controls that make it useful. Inventory what you ship, who can publish, and how fast you can patch a dependency.

Definitions informed by ASD's ACSC glossary. cyber.gov.au glossary