Centraleyes’s Glossary

A-Z guide to commonly used cybersecurity terms and phrases
 
Glossary visual

Resources | Glossary

Corporate Security Audit
A security audit systematically evaluates a company’s information system’s security by gauging how closely it adheres to predetermined standards. A...
Risk Prioritization
Risks may be infinite, but our time and budget (sadly) are not. Risk prioritization is the process of analyzing identified...
Automated Risk Assessment
Cyber security is a complex topic that strikes fear into the hearts of any stakeholder that could potentially be held...
IT General Controls
What are IT General Controls and why do we need them?  IT applications are a core part of almost everything...
Cyber Security Risk Register
The risks may vary but the goal does not: reducing risk through remediation or mitigation. Risk registers are not a...
Cyber Risk Score
What is Cyber Risk Score A cyber risk score is a numerical assessment of the level of security of an...
Risk-Based Security
What is Risk-Based Security Risk-based security approach addresses security risks by first identifying and evaluating threats facing the organization. A...
Cyber Security Ratings
What Are Cyber Security Ratings Cyber security risk ratings are an important metric for businesses to consider when assessing their...
Common Vulnerability Scoring System
What is CVSS Scoring Cybersecurity is an all-encompassing state of protection from unauthorized use of electronic data. It is an...
Attribute-Based Access Control
What Is Access Control? Network users must be authorized and authenticated in any organization before they are allowed access to...
Access Control Policy
What is Access Control Policy? Considered a key component in a security plan, access control policies refer to rules or...
What is Security Orchestration
What is Security Orchestration Security orchestration is the first of the SOAR cybersecurity acronym. Gartner introduced the SOAR (Security Orchestration,...
Cyber risk remediation
What is Cyber Risk Remediation? Cyber risk remediation is a process of identifying, addressing, and minimizing cyber vulnerabilities and risks...
ESG Framework
What is ESG? ESG (environmental, social, and governance) is a term used to represent an organization’s corporate interests that focus...
FAIR Training
What is the FAIR model? The FAIR model introduces a unique method of risk management. Training in the FAIR Institute...
cybersecurity architecture
What is the Definition of Cybersecurity Architecture? Cybersecurity Architecture, also known as Security Architecture or Network Security Architecture, describes the...
Risk Management Maturity
What is Risk Management? Risk management is the process used to manage risk in your organization. It also accelerates the...
Crosswalking Controls
What is a Security Controls Crosswalk? A control crosswalk helps link two different frameworks by connecting an identical requirement, or...
Attestation of Compliance
What is an Attestation of Compliance (AoC)?  Attestation of Compliance (AoC) is a statement of an organization’s compliance with PCI...
Cyber Attack Vector
What is an attack vector? We’ll start with a biology lesson. Vectors are small organisms such as mosquitoes, parasites, or...
information security governance
The overarching concepts and values that govern how you operate your organization are known as governance. That has to do...
Operational Resilience
Endurance in an Era of Uncertainty Operational resilience can be explained as the ability of a system to maintain operations...
Digital Risk Management
What is Digital Risk? Digital risk refers to the negative, sometimes unknown, outcomes that stem from adopting new digital technologies....
EDR Solutions
What is an EDR solution? EDR stands for Endpoint Detection and Response.  The term originated as “ETDR” (Endpoint Threat Detection...
Cyber Threat Modeling
What is Threat Modeling? Cyber threat modeling is a process whose goal is to identify the types of threats that...
Cybersecurity Posture
What is Cybersecuriy Posture? This refers to an organization’s cybersecurity readiness.  The vast majority of companies have moved all their...
Cybersecurity Maturity Model Certification (CMMC)
The CMMC, or Cybersecurity Maturity Model, is a program established by the Department of Defense to be upheld by contractors...
Cybersecurity Audit
What is a Cybersecurity Audit? A cybersecurity audit takes place to assess compliance, identify vulnerabilities and recognize any other problem...
Information Security Risk
Information technology is an excellent opportunity for businesses to increase their capabilities, but it’s also a significant source of organizational...
Compliance Automation Software
Security and compliance have always been critical tasks in business operations, and management teams have always been looking for ways...
Skip to content