
Terminology
Explore explanations of key terms and concepts, helping you better understand the language behind our work.
Showing 1–12 of 35 terms
Zero trust
Zero Trust is a security model that requires verification for every user and device, regardless of whether they are inside or outside the network.
Access control
Access control limits who can view or use resources in a system, ensuring only authorized users have the necessary permissions.
Vulnerability management
Vulnerability management is the process of identifying, assessing, and addressing security weaknesses in systems to reduce cyber risks.
Supply chain security
Supply chain security involves protecting products, data, and systems from risks or disruptions throughout the supply network.
Incident response plan
An incident response plan is a documented process for detecting, responding to, and recovering from security breaches or cyberattacks.
Security awareness
Security awareness is training that educates users on risks and best practices to protect data, systems, and personal information from threats.
Information security policy
An information security policy is a set of rules that guide how an organization protects its data and IT systems from threats.
Security controls
Security controls are measures, like passwords, encryption, and firewalls, used to protect data, systems, and networks from threats.
ISMS meaning
ISMS stands for Information Security Management System, a framework for managing and protecting sensitive company information.
Statement of Applicability
A Statement of Applicability (SOA) lists security controls chosen for an ISMS, explaining their inclusion, exclusion, and implementation status.
Guardrails for AI
Guardrails for AI are policies, rules, or tools that ensure AI systems operate safely, ethically, and within defined boundaries.
AI firewall
An AI firewall uses artificial intelligence to detect, prevent, and respond to cyber threats more intelligently than traditional firewalls.
