Centraleyes’s Glossary

A-Z guide to commonly used cybersecurity terms and phrases
 
Glossary visual

Resources | Glossary

GDPR Compliance Risk Assessment
Embarking on the GDPR (General Data Protection Regulation) compliance journey inevitably brings us face-to-face with a pivotal requirement: regular risk...
audit-fatigue
What is Audit Fatigue? Audit fatigue arises when organizations face numerous and repetitive security and compliance audits, leading to resource...
Compliance Operations
What Are Compliance Operations? Compliance operations encompass multifacet‏ed processes and activities undertaken by organizations. They systematically identify, assess, and mitigate...
Risk Management Automation
What is Risk Management Automation? Automated risk management involves using advanced technologies to identify, assess, and mitigate potential risks systematically...
Corporate Sustainability Reporting Directive
EU’s Corporate Sustainability Reporting Directive (CSRD), in effect since January 5, 2023, mandates EU businesses, including qualifying EU subsidiaries of...
Man-in-the-Middle Attack
What is a Man-in-the-Middle Attack? A Man-in-the-Middle (MitM) attack is a cybersecurity threat where an unauthorized actor intercepts and sometimes...
Digital Rights Management
What Are Digital Rights? Digital Rights refer to the permissions and restrictions associated with using digital content, such as text,...
Content Disarm and Reconstruction
What is Content Disarm and Reconstruction? CDR is a cybersecurity technique that disassembles and reconstructs files to ensure they are...
Calculated Risk
A calculated risk is a risk taken on purpose after estimating how likely it is and how much it could...
Data Residency
In the digital era, where information traverses borders effortlessly, data residency has emerged as a critical consideration for organizations navigating...
Asset Risk Management
Asset Risk Management in cybersecurity is identifying, assessing, and mitigating risks associated with an organization’s digital assets. These digital assets...
Identity Security
What is Identity Security? Identity security refers to a comprehensive approach to safeguarding all forms of identities within an organization,...
Risk Modeling
What is Risk Modeling in Cyber Security? At the core of cyber security risk management lies the discipline of cyber...
CISO Board Report
What is a CISO Board Report? A CISO board report is a strategic document that bridges the communication gap between...
Risk Communication
What is Risk Communication? Risk communication is a strategic process of sharing and disseminating information about potential digital risks and...
Audit Documentation
What Is Audit Documentation? Audit documentation is a detailed account of procedures, evidence, and conclusions collected during an audit. It...
what-is-erm
What is ERM? Enterprise Risk Management (ERM) is a comprehensive approach primarily focused on addressing a business’s strategic risks, encompassing...
Compliance Gap Analysis
What is Compliance Gap Analysis? Compliance gap analysis, often referred to simply as gap analysis, is a vital process that...
Security Misconfiguration
What is a Security Misconfiguration? Security misconfiguration refers to the improper or inadequate configuration of software, hardware, applications, or network...
Security Program Management
What is Security Program Management At its core, SPM represents a structured and holistic approach to securing an organization’s digital...
Digital Risk Protection
What are Digital Risk Protection Services? To address the rapidly evolving attack surface on digital and social platforms, digital risk...
Advanced Persistent Threat
An APT is not your average cyberattack; it is a prolonged and highly targeted campaign orchestrated by skilled adversaries with...
Continuous Auditing
What is Continuous Auditing? With automated technologies readily available on the digital market, auditors can now analyze vast volumes of...
Risk Control
What is Risk Control? Risk control refers to the systematic and proactive measures and strategies put in place by organizations...
SSAE 16
What is SSAE 16? Statement on Standards for Attestation Engagements No. 16 (SSAE 16) is a standard developed by the...
Risk Management Policy
What is a Risk Management Policy? A risk management policy is a structured framework and set of guidelines established by...
Risk Avoidance
What is Risk Avoidance? Risk avoidance in cyber security refers to the strategic measures to prevent potential risks and threats....
Resilience Management
A new buzzword has taken center stage in the digital world: resilience. In a world where data flows ceaselessly, businesses...
End-To-End Encryption
What is End-To-End Encryption? End-to-end encryption (e2ee) is a security measure that ensures that the data exchanged between two parties...
Data Minimization
The ever-increasing volume and speed of data flowing within your organization introduces opportunities and risks. While this data abundance can...
Skip to content