Centraleyes’s Glossary

A-Z guide to commonly used cybersecurity terms and phrases
 
Glossary visual

Resources | Glossary

pci NONCOMPLIANCE
Key Takeaways What are PCI Non-Compliance Fees? PCI non-compliance fees are penalties that merchants may face if they fail to...
nist incident response lifecycle
Key Takeaways What is the NIST Incident Response Life Cycle? The NIST Incident Response Life Cycle is a structured process...
hipaa omnibus rule
Key Takeaways What Is the HIPAA Omnibus Rule? The HIPAA Omnibus Rule is a 2013 regulatory update issued by the...
business continuity plan
When disaster strikes, most companies don’t fail because the event was too big. It’s more often the result of not...
human resource security policy
What is a Human Resource Security Policy? A human resource security policy is a structured document that defines how people-related...
fraud risk assessment
What Is a Fraud Risk Assessment? A Fraud Risk Assessment is a structured process used by businesses to evaluate their...
Supplier Performance Risk System
If you plan on working with the Department of Defense (DoD) and handling Controlled Unclassified Information (CUI), you’ve probably heard...
audit exception-feature
What is an Audit Exception? An audit exception is a specific instance, found during an internal or external audit, where...
managed security service provider
What is a Managed Security Service Provider? A Managed Security Service Provider acts as an extension of an organization’s IT...
pa-dss
What is PA-DSS? The Payment Application Data Security Standard (PA-DSS) was a globally recognized security standard developed by the Payment...
cybersecurity-benchmark
What is Cybersecurity Benchmarking? Would you drive a car without knowing its safety rating? Just like crash tests help assess...
cardholder data environment
What is a Cardholder Data Environment (CDE)? A Cardholder Data Environment (CDE) refers to the specific systems, processes, and people...
c3pao
What Is a C3PAO? A C3PAO (Certified Third-Party Assessment Organization) is an organization accredited by the Cybersecurity Maturity Model Certification...
Trust Center
Trust Centers are having their moment. They’ve become a must-have for organizations handling sensitive data. Acting as a central, public-facing...
nacha-compliance-feature
What Is NACHA Compliance? NACHA compliance refers to adherence to the operating rules and guidelines set forth by the National...
microsoft-sspa
Microsoft’s Supplier Security and Privacy Assurance (SSPA) program sets the privacy, security and responsible AI requirements for Microsoft suppliers that...
Information Security Compliance
What is Information Security Compliance? Information security compliance is the ongoing process of ensuring your organization meets security standards, follows...
Privacy Threshold Assessment
As privacy concerns grow globally, organizations are often required to assess how they handle personal data to ensure they meet...
Incident Response Model
What is an Incident Response Model? When a cyberattack hits, every second counts. Organizations need a structured, reliable framework to...
Risk Control Matrix
What Is a Risk Control Matrix? A Risk Control Matrix is a document or tool that helps organizations identify, assess,...
HIPAA Employee Training
What is HIPAA Employee Training?  The Health Insurance Portability and Accountability Act (HIPAA) is the backbone of patient privacy in...
Vendor Scorecard
What is a Vendor Scorecard? A vendor scorecard is a performance measurement tool used by organizations to assess, rate, and...
Threat Intelligence Platform
What is a Threat Intelligence Platform? A TIP software solution gathers, analyzes, and distributes real-time intelligence on cyber threats from...
What are Standard Contractual Clauses (SCCs)? Standard Contractual Clauses (SCCs) are essential for organizations that transfer personal data internationally. With...
NIS Regulations
What is the NIS Directive? The Network and Information Systems (NIS) Directive was introduced by the European Union in 2016...
Living-Off-the-Land Attacks
What Are Living Off the Land (LOTL) Attacks? The term “Living off the Land” refers to the technique where attackers...
grc as a service-feature
Today, businesses are juggling more GRC requirements than ever before. It’s no surprise that many companies are looking for smart...
DAC glossary feature
What is Discretionary Access Control (DAC)?  Discretionary Access Control (DAC) is one of the simplest and most flexible access control...
asv-glossary-feature
What is CDI (Covered Defense Information)? Covered Defense Information (CDI) refers to unclassified information that requires protection due to its...
ai secure development glossary feature
What is AI Secure Development? AI secure development means ensuring security is part of the AI development process from the...
Skip to content