Centraleyes’s Glossary

A-Z guide to commonly used cybersecurity terms and phrases
 
Glossary visual

Resources | Glossary

Data Spillage
What is Data Spillage? NIST defines data spillage as a “security incident that results in the transfer of classified information...
Account Takeover
What Is an Account Takeover? An account takeover refers to a situation where an unauthorized individual gains access to an...
Security Gap Analysis
What is a Gap Analysis? Security gap analysis is a procedure that aids businesses in assessing how well their existing...
IoT Cybersecurity
The term IoT (Internet of Things) refers to physical devices, vehicles, appliances, and other objects embedded with sensors, software, and...
Issue Management
What is Issue Management? Issue management refers to the handling of issues that develop within a company such as employee...
Audit Management
What is Audit Management? Audit management is the oversight, governance, and established procedures that help you manage an audit. Audits...
Risk Appetite Statement
What is a Risk Appetite Statement? A risk appetite statement is a formal document that states an organization’s willingness and...
Cybersecurity_Due_Diligence-1
Due diligence is an investigative process that is carried out to assess an entity under consideration. In business, due diligence...
Penetration Testing
What is Penetration Testing? Cyber penetration testing is an effective way to show that your security program is capable of...
Complimentary User Entity Controls
What Are Complimentary User Entity Controls? When you think of third-party risk management, what usually comes to mind is the...
Network Security Test
What is a Network Security Test? Network security tests help to discover vulnerabilities in a company’s network and internal systems...
Compliance Tracking
What is Compliance Tracking? Compliance tracking is a monitoring process that ensures that compliance requirements are being met and identifies...
3x3 Matrix
What is a Risk Matrix? A risk matrix is a tool used during the risk assessment stage of risk management....
5x5 Risk Matrix
What is a Risk Matrix? A risk matrix is a tool used during the risk assessment stage of risk management....
4x4 Matrix
What is a Risk Matrix? A risk matrix is a tool used during the risk assessment stage of risk management....
Spooling in Cyber Security
What is Spooling in Cyber Security? Spooling is an important mechanism in computer systems that helps temporarily store data in...
Regulatory Risk
What is Regulatory Risk? Regulatory risk is the impact of changing laws and regulations on your business. Changes in regulation...
EHS Compliance
What is EHS Compliance? EHS (Environmental Health and Safety) compliance is the process of ensuring that a company complies with...
Dynamic Risk Assessment 
What is a Dynamic Risk Assessment? Risk assessments, as we know them, are a one-time evaluation of potential risks inherent...
Written Information Security Program
What is a Written Information Security Program? A Written Information Security Program (WISP) is a document that details an organization’s...
Attack Surface Management
What is Attack Surface Management? Attack surface management (ASM) is the continuous identification, assessment, and remediation of potential attack vectors...
Qualified Security Assessor
A qualified security assessor, often known as a QSA, assists businesses in detecting weaknesses in their cybersecurity and cyber security...
Risk Acceptance
What is Risk Acceptance? Risk acceptance is a decision to accept risk instead of eliminating, avoiding, or mitigating it. Accepting...
Vulnerability Scanners
What are Vulnerability Scanners? Vulnerability scanners identify and assess vulnerabilities on a computer or network that could be exploited by...
Residual Risk
What is Residual Risk? Residual risk is the byproduct of managed risk that remains after controls are implemented. Residual risk...
DevSecOps
What is DevSecOps? DevSecOps is a trend in application security (AppSec) that involves introducing security at the conception of the...
Vulnerability Remediation
A security vulnerability is a weakness in your system which can be exploited if left unattended. The process of identifying...
Identity & Access Management
What is Identity and Access Management? Identity and Access Management (IAM) system defines and manages user identities and access permissions....
 Cybersecurity Mesh Architecture
Defining Cybersecurity Mesh Architecture Cybersecurity mesh architecture (CSMA) refers to an architectural model that integrates disparate and widely distributed security...
Proactive Risk Management
What is proactive risk management? Proactive risk management is the concept of dealing with risks before they happen and figuring...
Skip to content