Access Control - Access control is the process of permitting or denying access to resources according to defined rules.
Adaptive redaction - Adaptive redaction is the policy-directed removal or replacement of selected sensitive content according to the circumstances of a communication or data use.
Air gap (networking) - An air gap is a separation between systems without a direct physical connection or an automated logical data-transfer path across the boundary.
Application firewall - An application firewall examines application-level communication and applies rules to permit or block traffic.
Application security - Application security is the work of designing, building, testing, operating and maintaining applications to protect them against security failures and misuse.
Backup validation - Backup validation is the process of checking whether a backup meets defined requirements for integrity, completeness and intended recovery use.
Biometric tokenization - Biometric tokenization is a term used for authentication arrangements that combine biometric verification with a substitute digital credential or...
Chain of trust - A chain of trust is a sequence of relationships or verification steps through which confidence in one component or claim depends on an accepted starting...
Chinese wall - A Chinese wall is an information barrier intended to prevent inappropriate sharing between activities or parties with conflicting interests.
Context-based access control - Context-based access control, or CBAC, is used here in its Cisco IOS firewall sense: traffic filtering that uses session information, including supported...
Crypto-shredding - Crypto-shredding is the practice of making encrypted data inaccessible by irrecoverably eliminating the key material needed to decrypt it.
Cryptographic splitting - Cryptographic splitting is a broad label for dividing protected data or secret material into separately held parts using a cryptographic design.
Cyber kill chain - The Cyber Kill Chain is a framework associated with Lockheed Martin for analyzing an intrusion as a sequence of stages and identifying opportunities to...
Data catalog - A data catalog is an organized collection of metadata that helps people discover, understand and manage data assets.
Data Contract - A data contract is an explicit specification of expectations about data supplied to a consumer.
Data corruption - Data corruption is an unintended or unauthorized change to data that damages its correctness, structure, or usability.
Data degradation - Data degradation is deterioration in the integrity or usability of data over time.
Data entry - Data entry is the process of recording information in a computer system so it can be stored, processed, and used.
Data exfiltration - Data exfiltration is the unauthorized transfer of information out of a system or controlled environment.
Data governance - Data governance is the system of decision rights, responsibilities, policies, and oversight through which an organization directs how its data is managed...
Data integrity - Data integrity is the condition in which data remains consistent with its intended content and applicable rules, and is protected against improper...
Data lifecycle - The data lifecycle is the sequence of activities through which data is planned, obtained, processed, used, maintained, shared, preserved, and eventually...
Data minimization principle - The data minimization principle requires personal data to be sufficient and relevant for a defined purpose while limiting it to what that purpose needs.
Data Quality - Data quality is the degree to which data meets the requirements of its intended use.
Data quality dimensions - Data quality dimensions are distinct aspects used to describe and assess data quality.
Data quality firewall - A data quality firewall is a descriptive name for software checks placed at a data-entry or pipeline boundary to prevent records with specified quality...
Data recovery - Data recovery is the process of restoring access to usable data after it has been lost, deleted, damaged, or made unavailable.
Data theft - Data theft is the deliberate unauthorized taking or copying of information.
Data truncation - Data truncation is the shortening of a value by removing part of it, usually because a destination, conversion, operation, or limit allows less information...
Database encryption - Database encryption uses cryptographic methods and keys to protect database information from being read in specified unauthorized circumstances.
De-perimeterization - De-perimeterization is the shift away from treating an organization's outer network boundary as the main basis for protecting its information.
Digital continuity - Digital continuity is the ability to keep digital information usable for the purposes and period for which it is needed.
Dirty data - Dirty data is an informal name for data with quality problems that make it unreliable or unsuitable for an intended use.
Discretionary access control - Discretionary access control, or DAC, is an approach in which an object's owner or another authorized controller has some discretion to decide who can...
Doxing - Doxing, also spelled doxxing, is the deliberate online exposure of someone's identity or personal information without their consent, typically to enable...
Electronic seal - An electronic seal is electronic data associated with other electronic information to support verification of its origin and integrity.
Entity integrity - Entity integrity is the database principle that each row must have a dependable identity, commonly enforced through a primary key whose values are unique...
Extrusion detection - Extrusion detection is a security-monitoring perspective that looks for harmful activity originating inside a system or network, especially through outgoing...
Firewall (computing) - A firewall is a device, program, or service that controls network traffic according to a defined security policy.
Guard (information security) - In information security, a guard is a trusted system or mechanism that mediates information transfer between systems operating under different security...
Hard privacy technologies - Hard privacy technologies are privacy-enhancing approaches designed to reduce the need to trust a data holder by technically limiting what information that...
Identity and access management - Identity and access management, or IAM, is the coordinated management of digital identities and their access to systems, services, and information.
Inference attack - An inference attack attempts to discover protected or sensitive information indirectly from information that is available, such as published statistics...
Information security awareness - Information security awareness is people's understanding of relevant information risks, their responsibilities, and the practical actions they can take to...
Information security indicators - Information security indicators are defined measures or signals used to understand aspects of an organization's security condition, control performance, or...
Information sensitivity - Information sensitivity describes how much protection information needs because of the consequences of inappropriate disclosure, access, use, alteration, or...