GO-ITS 25.10 Security Requirements for Mobile Devices - Ontario.ca

Sensitivity: Unclassified Approved Version #: 1.3
Threat risk assessment (TRA): A tool to assist Program Managers in fulfilling their
responsibilities for security risk management and the development of security plans. A
Threat Risk Assessment (TRA) is used to:
• Assess the sensitivity of program assets and information;
• Identify and analyse potential threats and vulnerabilities;
• Assess the level of risk taking into consideration the effectiveness of current security
measures; and
• Recommend appropriate measures to protect assets and information from loss, theft,
destruction, modification, or misuse.
User: A person authorized to access and use Information and Information Technology
resources.
Virtual Private Network (VPN): A communications session tunneled through another
network, and dedicated for a specific use. One common application is secure
communication through the public Internet, but a VPN need not have explicit security
features, such as authentication or content encryption. Some types of VPN, for example,
can be used to separate the traffic of different user communities over an underlying network
with strong security features.
GO-ITS 25.10 Security Requirements for Mobile Devices
Page 26 of 27