Terminology

Zero trust

Zero trust is a cybersecurity model that assumes no user or device, inside or

Access control

Access control is a security technique used to regulate who can view or use

Vulnerability management

Vulnerability management

Vulnerability management is the process an organization uses to identify, assess, prioritize, and remediate

Supply chain security

Supply chain security

Supply chain security refers to the measures and processes organizations use to protect their

Incident response plan

Incident response plan

An incident response plan (IRP) is a set of instructions outlining how an organization

Security awareness

Security awareness

Security awareness is the understanding and knowledge employees need to recognize and respond to

Information security policy

Information security policy

An information security policy (ISP) outlines how an organization manages and safeguards its sensitive

Security controls

Security controls

Security controls are safeguards used to protect systems, data, and people from threats. They

ISMS meaning

An Information Security Management System (ISMS) is a structured framework for managing and protecting

Statement of Applicability

Statement of Applicability

A Statement of Applicability (SOA) is a document used in information security to list

Guardrails for AI

Guardrails for AI

Guardrails for Artificial Intelligence (AI) are rules, tools, and processes that keep AI systems

AI firewall

An AI firewall is a security system that uses artificial intelligence (AI) to detect