CISSP (CISSP) PathTerms™

Showing 370 terms in a learn-these-first order.

1. 01AI Security GovernanceAI Security Governance is a framework for managing AI security risks, ensuring responsible development and deployment.Outline change April 2027
2. 02Analytical MethodsAnalytical methods are systematic approaches to examine, interpret, and draw conclusions from data or information in technology.Outline change April 2027
3. 03Assessment WorkflowsStructured processes to evaluate IT systems and practices for security, performance, or compliance, identifying risks and areas for improvement.Outline change April 2027
4. 04compliance capabilitiesCompliance capabilities are the tools and processes organizations use to meet regulatory, legal, or industry standards for security and data handling.Outline change April 2027
5. 05Compliance in DevOpsCompliance in DevOps integrates regulatory and policy requirements into the software development and operational lifecycle.Outline change April 2027
6. 06Configure PrivacyConfigure Privacy sets rules for protecting sensitive information, controlling access, and ensuring data is used appropriately.Outline change April 2027
7. 07Content moderationContent moderation reviews user generated material to ensure it meets platform rules and legal standards, using AI and human oversight.Outline change April 2027
8. 08Data OperationsData Operations manages and oversees an organization's data throughout its lifecycle, ensuring quality, security, and compliance.Outline change April 2027
9. 09Data Protection OperationsData Protection Operations are the policies and controls that safeguard sensitive information from unauthorized access, disclosure, alteration, or destr...Outline change April 2027
10. 10ExposureExposure is the potential for a system, data, or individual to be subjected to an undesirable event or condition, representing vulnerability.Outline change April 2027
11. 11FedRAMPFedRAMP is a US government program standardizing cloud security assessments and authorizations for federal agencies.Outline change April 2027
12. 12FIDO2FIDO2 (WebAuthn) is a standard for passwordless authentication using strong, phishing-resistant methods like biometrics or security keys.Outline change April 2027
13. 13Global Privacy LawsGlobal privacy laws are regulations protecting personal data, defining rights for individuals and obligations for organizations handling data.Outline change April 2027
14. 14Google Cloud security and operationsGoogle Cloud security and operations integrates practices and tools for protecting cloud resources and ensuring their reliable functioning.Outline change April 2027
15. 15Guest ServicesGuest Services manages secure external access to IT resources, protecting internal systems while enabling necessary external interactions.Outline change April 2027
16. 16Guidelines for Responsible AIPrinciples and practices for ethical, safe, and accountable AI development and deployment.Outline change April 2027
17. 17Information ProtectionSafeguarding sensitive data through policies, procedures, and controls to prevent unauthorized access, use, or disclosure.Outline change April 2027
18. 18Information Security Controls & AuditInformation Security Controls & Audit involves implementing and verifying safeguards to protect digital assets and data, ensuring confidentiality, integ...Outline change April 2027
19. 19Information security policyAn information security policy defines an organization's rules for protecting sensitive data and systems, guiding expected behavior and acceptable techn...Outline change April 2027
20. 20Introduction to Incident HandlingIntroduction to Incident Handling is the structured process for preparing for, detecting, responding to, and recovering from cybersecurity incidents.Outline change April 2027
21. 21ITILITIL is a framework of best practices for IT service management, focusing on aligning IT with business needs and improving service quality.Outline change April 2027
22. 22Landing zoneA landing zone is a pre-configured cloud environment providing a secure and compliant foundation for hosting workloads and establishing governance.Outline change April 2027
23. 23Legal, Risk and ComplianceLegal, Risk, and Compliance (LRC) integrates laws, regulations, and policies to ensure secure and lawful organizational operations.Outline change April 2027
24. 24Manage AppsManage Apps encompasses the full lifecycle of software applications, ensuring security, performance, and business alignment.Outline change April 2027
25. 25manage external collaborationManage external collaboration means building secure and productive relationships with outside individuals or organizations for technology projects.Outline change April 2027
26. 26Management of ITManagement of IT is the strategic planning, organization, and control of an organization's technology resources. It ensures alignment with business goals.Outline change April 2027
27. 27OAuthOAuth 2.0 is an open standard for access delegation, allowing third-party apps to access resources without sharing user credentials.Outline change April 2027
28. 28OpenID ConnectOpenID Connect OIDC is an identity layer on OAuth 2.0 for secure single sign on SSO experiences.Outline change April 2027
29. 29PMO Strategic ElementsPMO Strategic Elements are the foundational components of a Project Management Office that align its activities with overarching business objectives.Outline change April 2027
30. 30Privacy ControlsPrivacy controls are safeguards protecting personal information from unauthorized access, use, disclosure, alteration, or destruction.Outline change April 2027
31. 31Privacy PrinciplesPrivacy Principles are core guidelines for responsible data handling, ensuring individual rights are protected throughout the data lifecycle.Outline change April 2027
32. 32Privacy Program DevelopmentPrivacy Program Development is the systematic process of establishing and maintaining an organization's commitment to protecting personal information.Outline change April 2027
33. 33ProtectProtect means implementing safeguards to defend assets, data, systems, and people from harm or unauthorized access.Outline change April 2027
34. 34Recovery & ReadinessRecovery and Readiness ensures an organization can effectively respond to and recover from disruptive events while maintaining operational continuity.Outline change April 2027
35. 35Recovery SupportRecovery Support are the essential processes and people that restore IT systems after a failure, ensuring business continuity.Outline change April 2027
36. 36Reporting & LegalReporting and Legal ensures technology operations comply with laws, regulations, and policies, demonstrating accountability and mitigating risks.Outline change April 2027
37. 37Retention and RecordsRetention and Records defines policies for storing and managing information, crucial for compliance, risk reduction, and operational efficiency.Outline change April 2027
38. 38SAMLSAML is an open standard for exchanging authentication and authorization data, enabling single sign on SSO across applications.Outline change April 2027
39. 39Secure AccessSecure Access ensures only authorized users and devices can access specific network resources and data through identity verification and policy enforcem...Outline change April 2027
40. 40Secure Lifecycle Management and OperationsIntegrating security into every stage of a system's life, from design to disposal, to minimize risk and enhance reliability.Outline change April 2027
41. 41Security and ComplianceSecurity and Compliance ensures IT systems are protected from threats and meet legal and regulatory requirements, building trust and avoiding penalties.Outline change April 2027
42. 42Security & Disaster RecoverySecurity and Disaster Recovery protect assets and ensure business continuity by preventing unauthorized access and planning for operational restoration.Outline change April 2027
43. 43Security, Compliance and Identity ConceptsUnderstand the core principles of protecting digital assets, meeting regulations, and managing user access for robust cybersecurity.Outline change April 2027
44. 44Security Concepts and CryptographySecurity Concepts and Cryptography are the core principles and techniques for protecting information and systems from threats.Outline change April 2027
45. 45SOC ProcessesSOC Processes are the standardized procedures a Security Operations Center uses to detect, analyze, and respond to cybersecurity threats.Outline change April 2027
46. 46Technical ComplianceTechnical compliance means ensuring IT systems meet specific security, privacy, and operational standards and regulations.Outline change April 2027
47. 47Vendor ManagementVendor Management ensures third-party suppliers meet organizational needs and risks through oversight and control.Outline change April 2027
48. 48Acceptable use policyAn Acceptable Use Policy (AUP) defines rules for using an organization's IT resources, protecting assets and data.Outline change April 2027
49. 49Access ManagementAccess Management ensures authorized users get appropriate system and resource access while blocking unauthorized access.Outline change April 2027
50. 50AccountsAn account is a unique identity in a system, controlling access and permissions for users or services.Outline change April 2027
51. 51AI StrategyAn AI strategy is a plan for how an organization will use artificial intelligence to meet its goals and manage its implementation.Outline change April 2027
52. 52AlignmentAlignment ensures technology efforts directly support business objectives, syncing strategy, operations, and security for maximum impact.Outline change April 2027
53. 53Asset SecurityAsset security protects an organization's valuable resources, including hardware, software, data, and intellectual property, from unauthorized access or...Outline change April 2027
54. 54Audit SupportAudit support involves collecting and preserving evidence to demonstrate compliance with policies and regulations, crucial for security verification and...Outline change April 2027
55. 55Business associate agreementA Business Associate Agreement (BAA) is a contract ensuring third parties protect sensitive health information according to HIPAA rules.Outline change April 2027
56. 56Cardholder data environmentThe cardholder data environment (CDE) is the secure zone where payment card information is handled. It protects sensitive data from breaches.Outline change April 2027
57. 57Cloud Security AssessmentA Cloud Security Assessment evaluates cloud environments for vulnerabilities, risks, and compliance gaps to ensure robust security.Outline change April 2027
58. 58Cluster SecurityCluster security protects distributed computing environments by securing nodes, networks, and data against unauthorized access and disruptions.Outline change April 2027
59. 59Communications SecurityCOMSEC protects sensitive information during transmission, ensuring confidentiality and integrity through specific measures and procedures.Outline change April 2027
60. 60ComplianceCompliance means following rules and standards for security and privacy, ensuring organizations meet legal and industry requirements.Outline change April 2027
61. 61Compliance & Risk ManagementEnsuring adherence to laws and regulations while identifying and mitigating threats to information assets.Outline change April 2027
62. 62Compliance (GRC)Compliance (GRC) ensures adherence to security laws, regulations, and policies, integrating governance, risk management, and compliance.Outline change April 2027
63. 63Compliance in NetworkingCompliance in networking means following rules and standards for network design, implementation, and operation to ensure security, privacy, and reliabil...Outline change April 2027
64. 64Compliance ProgramA Compliance Program ensures adherence to laws, regulations, and standards, mitigating risk and building trust.Outline change April 2027
65. 65compliance settings for TeamsCompliance settings for Teams are configurations that ensure adherence to organizational rules, industry regulations, and legal requirements for communi...Outline change April 2027
66. 66Conditional Access policyA security control that grants, denies, or requires additional authentication for cloud resource access based on conditions.Outline change April 2027
67. 67ConductConduct defines the ethical and effective standards for managing technology, covering building, operating, and securing systems.Outline change April 2027
68. 68Contingency ManagementContingency Management is planning for and responding to unexpected events to ensure business continuity and minimize disruption.Outline change April 2027
69. 69ContinuityContinuity ensures essential functions persist during disruptions through planning, redundancy, and recovery procedures.Outline change April 2027
70. 70Controls and AssuranceControls and Assurance establishes measures to manage risk and ensure systems function as intended, vital for operational stability and data integrity.Outline change April 2027
71. 71Data Collection ImplementationData Collection Implementation is the process of gathering and organizing information for operational, security, or technology initiatives.Outline change April 2027
72. 72Defender for Endpoint responseInvestigate and remediate security threats on endpoints with Microsoft Defender for Endpoint response capabilities.Outline change April 2027
73. 73Design business continuity solutionsCreating plans and strategies for organizations to maintain essential functions during and after disruptive events.Outline change April 2027
74. 74Detection StrategyA Detection Strategy defines how an organization identifies security threats and policy violations within its systems and networks.Outline change April 2027
75. 75Digital certificateA digital certificate, or X.509 certificate, is an electronic document that cryptographically binds a public key to an identity, enabling secure communi...Outline change April 2027
76. 76Disaster Recovery: Data SecurityProtecting sensitive information during and after disruptive events, ensuring confidentiality, integrity, and availability.Outline change April 2027
77. 77Disaster Recovery PlanningDisaster Recovery Planning (DRP) is the process of creating a roadmap to resume business operations after a disruptive event. It involves identifying cr...Outline change April 2027
78. 78Domain controllerA domain controller is a server that centralizes network user authentication and security policy management.Outline change April 2027
79. 79Dumpster divingDumpster diving is searching discarded materials for sensitive information, a physical and digital security threat.Outline change April 2027
80. 80Eligibility SupportEligibility Support defines the criteria and processes for qualifying individuals, systems, or components for access or participation.Outline change April 2027
81. 81EvidenceEvidence is verifiable information supporting claims or decisions in technology, crucial for validation and informed decision-making.Outline change April 2027
82. 82Governance & EthicsGovernance and Ethics provides the principles and practices for responsible and legal technology use, crucial for trust and risk mitigation.Outline change April 2027
83. 83Governance, Risk & ComplianceGRC integrates governance, risk management, and compliance to ensure operational integrity and regulatory adherence.Outline change April 2027
84. 84GRC ToolsGRC tools are software solutions that help organizations manage governance, risk, and compliance activities holistically.Outline change April 2027
85. 85Identity and Compliance StrategyA plan for managing user identities, access, and regulatory adherence to protect data and meet requirements.Outline change April 2027
86. 86Incident HandlingIncident handling is a structured approach to managing and responding to security breaches or cyberattacks, minimizing damage and restoring operations.Outline change April 2027
87. 87Incident ManagementIncident Management is the structured process for responding to and recovering from security breaches and disruptive IT events.Outline change April 2027
88. 88Incident PracticesIncident Practices are the established procedures for preparing for, detecting, responding to, and recovering from cybersecurity incidents.Outline change April 2027
89. 89Incident responseIncident response (IR) is the structured process for handling security breaches and cyberattacks to minimize damage and recover quickly.Outline change April 2027
90. 90Incident Response & RecoveryIncident Response & Recovery is a structured approach to managing and mitigating the impact of security breaches or disruptive events within an organiza...Outline change April 2027
91. 91Incident response planAn incident response plan (IRP) is a documented set of procedures an organization follows when a security breach or cyberattack occurs.Outline change April 2027
92. 92Incident Response TechniquesIncident response techniques are the established procedures and actions organizations follow to manage and mitigate the impact of cybersecurity breaches...Outline change April 2027
93. 93Information Security GovernanceInformation Security Governance provides the framework for how an organization manages and oversees its information security program, aligning security...Outline change April 2027
94. 94Information Security Incident ManagementA structured approach to handling cybersecurity events, minimizing damage, and restoring operations.Outline change April 2027
95. 95Information Security ProgramA comprehensive framework of policies, procedures, and controls protecting an organization's information assets.Outline change April 2027
96. 96Infrastructure and Application SecurityInfrastructure and Application Security protects IT systems and software from cyber threats, ensuring reliability and data integrity.Outline change April 2027
97. 97Infrastructure SecurityInfrastructure security protects an organization's physical and virtual IT assets from unauthorized access, damage, or disruption.Outline change April 2027
98. 98Integration with Security FrameworksAligning cybersecurity practices with industry standards and guidelines like NIST or ISO 27001 for enhanced security.Outline change April 2027
99. 99Issue ManagementIssue management is the systematic process of identifying, documenting, analyzing, prioritizing, and resolving problems or disruptions.Outline change April 2027
100. 100Just-in-time accessJust-in-time access grants temporary elevated privileges, reducing risk by minimizing exposure to sensitive systems and data.Outline change April 2027
101. 101KerberosKerberos is a network authentication protocol using secret key cryptography and trusted third parties for secure client server communication.Outline change April 2027
102. 102LawLaw defines the rules and standards governing technology development, operation, and security, ensuring compliance and mitigating risks.Outline change April 2027
103. 103LDAPLDAP is a protocol for accessing and managing directory information services over IP networks, often used for authentication.Outline change April 2027
104. 104Legal ComplianceLegal compliance means following laws and regulations for data protection, privacy, and cybersecurity.Outline change April 2027
105. 105Management & Security GovernanceManagement and Security Governance provides the framework for directing and overseeing technology operations and security.Outline change April 2027
106. 106Monitor & Close RisksMonitor & Close Risks is the continuous process of identifying, assessing, and mitigating technology threats and vulnerabilities.Outline change April 2027
107. 107Monitoring and ResponseContinuously observing IT systems for issues and taking action when problems are detected to ensure stability and security.Outline change April 2027
108. 108Monitoring: Requirements ControlMonitoring: Requirements Control defines what, how, and why systems should be monitored to meet specific operational and security needs.Outline change April 2027
109. 109Online proctored examAn online proctored exam is a secure, remotely administered test monitored by a live proctor via webcam and screen share.Outline change April 2027
110. 110OT Security OperationsOT Security Operations protects industrial control systems and physical processes, focusing on availability, integrity, and confidentiality.Outline change April 2027
111. 111OversightOversight is the active monitoring and supervision of activities to ensure they meet standards and achieve goals, crucial for quality and risk mitigation.Outline change April 2027
112. 112OwnershipOwnership means accountability for technology assets throughout their lifecycle, ensuring clear responsibility for management, security, and decision-ma...Outline change April 2027
113. 113PasskeysPasskeys are a passwordless authentication method using public key cryptography stored on your device, enhancing security and eliminating phishing risks.Outline change April 2027
114. 114PESTLEPESTLE is a strategic analysis framework examining external factors like Political, Economic, Social, Technological, Legal, and Environmental influences.Outline change April 2027
115. 115PIIPII is any data that can identify a specific individual, crucial for cybersecurity and privacy compliance.Outline change April 2027
116. 116Plan and implement identity governancePlan and implement identity governance manages digital identities and access, ensuring security and compliance throughout the identity lifecycle.Outline change April 2027
117. 117PlaybookA playbook is a documented guide for responding to specific events or threats, ensuring consistent and effective action.Outline change April 2027
118. 118Playbook DevelopmentPlaybook development creates structured, step-by-step guides for IT operations, ensuring consistent and efficient responses to events.Outline change April 2027
119. 119PMO OperationPMO Operation encompasses the daily management and execution processes overseen by a Project Management Office to ensure project success.Outline change April 2027
120. 120Privacy CompliancePrivacy compliance ensures organizations handle personal data responsibly, adhering to laws and protecting individual rights.Outline change April 2027
121. 121Privacy GovernancePrivacy governance is the framework for managing and protecting personal information throughout its lifecycle, ensuring compliance and building trust.Outline change April 2027
122. 122Privacy Governance FrameworksA Privacy Governance Framework structures how organizations manage and protect personal information, ensuring compliance and building trust.Outline change April 2027
123. 123Privacy Program GovernancePrivacy Program Governance sets the rules and oversight for an organization's privacy efforts, ensuring compliance and ethical data handling.Outline change April 2027
124. 124Privacy Program OperationsPrivacy Program Operations are the practical, day-to-day activities that ensure an organization's data handling complies with privacy laws and ethics.Outline change April 2027
125. 125Privacy StrategyA Privacy Strategy is a comprehensive plan for protecting sensitive personal information throughout its lifecycle, guiding responsible data handling and...Outline change April 2027
126. 126ProcessesProcesses are defined steps and actions taken to achieve a specific outcome, ensuring consistency and reliability in IT operations.Outline change April 2027
127. 127Project management officeA Project Management Office (PMO) centralizes project standards, provides resources, and ensures alignment with business strategy.Outline change April 2027
128. 128Recovery TestingRecovery Testing validates system and data restoration after disruptions, ensuring business continuity and minimizing downtime.Outline change April 2027
129. 129Remediation RecommendationsActionable steps to fix identified security weaknesses and vulnerabilities, crucial for improving an organization's security posture.Outline change April 2027
130. 130Reporting and CommunicationReporting and Communication is the process of gathering, analyzing, and sharing information about technology systems and projects.Outline change April 2027
131. 131Risk Management DirectionStrategic guidance for identifying, assessing, and prioritizing threats to information assets and operations.Outline change April 2027
132. 132Risk Management in HRRisk Management in HR identifies and controls threats to employee data and human capital, crucial for cybersecurity and compliance.Outline change April 2027
133. 133Risk PracticesRisk practices are the established procedures and methods organizations use to identify, assess, and manage potential threats to their information syste...Outline change April 2027
134. 134Root accountThe root account is the primary administrative identity in cloud environments, granting unrestricted access to all resources and services.Outline change April 2027
135. 135RTOA Recovery Time Objective (RTO) is the maximum acceptable downtime for a system after a disruption.Outline change April 2027
136. 136Safety & Risk ManagementSafety and risk management identifies and mitigates threats to protect assets and operations, ensuring business continuity and data security.Outline change April 2027
137. 137Secure Network AccessSecure Network Access ensures only authorized users and devices connect to your network, protecting sensitive data and systems from threats.Outline change April 2027
138. 138Security & ComplianceSecurity and Compliance integrates protection of information assets with adherence to laws, regulations, and standards.Outline change April 2027
139. 139Security and Risk ManagementIdentify, assess, and control threats to protect digital assets and operations, ensuring business continuity and data protection.Outline change April 2027
140. 140Security Compliance ManagementSecurity compliance management ensures adherence to security laws, regulations, standards, and policies, managing risks and maintaining trust.Outline change April 2027
141. 141Security GovernanceSecurity Governance is the framework of rules, practices, and processes that dictate how an organization manages and protects its information assets.Outline change April 2027
142. 142Security OperationsSecurity Operations (SecOps) are the ongoing processes, tools, and teams that protect an organization's digital assets and infrastructure from cyber thr...Outline change April 2027
143. 143Security Operations: MonitoringContinuous observation and analysis of IT environments to detect and respond to security threats and anomalies.Outline change April 2027
144. 144Security Operations StrategyA Security Operations Strategy is a plan for protecting digital assets and responding to cyber threats.Outline change April 2027
145. 145Security PlanningSecurity planning is the proactive process of identifying potential security risks and developing strategies to mitigate them before they can impact an...Outline change April 2027
146. 146Security PoliciesFormal documented rules and guidelines for protecting an organization's information assets and systems.Outline change April 2027
147. 147Security Program ManagementSecurity Program Management is the strategic framework for an organization's cybersecurity efforts, integrating planning, implementation, and maintenanc...Outline change April 2027
148. 148Security Program Management & OperationsManage and operate your cybersecurity initiatives strategically, integrating security into all technology operations for comprehensive protection.Outline change April 2027
149. 149Standard operating procedureA Standard Operating Procedure (SOP) is a documented set of step-by-step instructions for completing a specific task consistently and efficiently.Outline change April 2027
150. 150State Laws & PreemptionState Laws and Preemption defines the hierarchy of US laws impacting cloud computing, especially concerning data and privacy regulations.Outline change April 2027
151. 151System ComplianceSystem compliance means ensuring an information system meets specific standards, regulations, and policies for security, privacy, or operations.Outline change April 2027
152. 152Systems Security ImplementationSystems Security Implementation is the practical application of security controls in IT infrastructure and operations, covering design, deployment, and...Outline change April 2027
153. 153TAXIITAXII is a set of specifications for exchanging cyber threat intelligence between systems and organizations.Outline change April 2027
154. 154Technical Risk ManagementTechnical Risk Management identifies, assesses, and controls risks related to technology systems and their implementation.Outline change April 2027
155. 155TransparencyTransparency means making information about processes, decisions, and data readily accessible and understandable to relevant stakeholders.Outline change April 2027
156. 156UDFsUser-Defined Functions (UDFs) are custom code snippets that extend database or programming environment capabilities, simplifying complex logic.Outline change April 2027
157. 157Advanced Incident Handling TechniquesAdvanced Incident Handling Techniques are sophisticated strategies for managing complex cybersecurity incidents, focusing on in depth analysis and tailo...Outline change April 2027
158. 158Advanced ToolsSpecialized software, hardware, or methodologies that solve complex technical challenges and optimize system performance.Outline change April 2027
159. 159Adversary BehaviorAdversary behavior describes the techniques, tactics, and procedures malicious actors use to compromise systems and achieve objectives.Outline change April 2027
160. 160AESAES (Advanced Encryption Standard) is a symmetric block cipher used to encrypt sensitive data, ensuring confidentiality and integrity.Outline change April 2027
161. 161AI ComplianceAI Compliance ensures AI systems are ethical, legal, and responsible, mitigating risks and fostering trust.Outline change April 2027
162. 162AI-Enabled AuditAI-Enabled Audit uses AI to automate and enhance system reviews, improving risk detection and compliance.Outline change April 2027
163. 163AI governanceAI governance establishes policies and controls for ethical, secure, and compliant AI development and deployment.Outline change April 2027
164. 164AI Governance Case StudiesAI Governance Case Studies are real-world scenarios demonstrating how organizations manage AI systems responsibly and ethically.Outline change April 2027
165. 165AI Governance FrameworksAn AI Governance Framework provides policies and processes to manage AI development, deployment, and use, ensuring ethical and compliant operations.Outline change April 2027
166. 166AI RegulationAI Regulation encompasses rules and laws governing AI development and use, ensuring safety, ethics, and accountability.Outline change April 2027
167. 167AI Risk ManagementAI Risk Management identifies, assesses, and mitigates harms from AI systems, ensuring responsible development and deployment.Outline change April 2027
168. 168AI Risk TreatmentAI Risk Treatment manages potential harms from AI systems by identifying, assessing, and mitigating risks through controls and strategies.Outline change April 2027
169. 169AI SafetyAI Safety ensures AI systems are reliable, beneficial, and aligned with human values, preventing unintended harm.Outline change April 2027
170. 170AI TRiSMAI TRiSM ensures AI systems are trustworthy, secure, and ethically managed throughout their lifecycle.Outline change April 2027
171. 171ALEAnnualized Loss Expectancy (ALE) estimates potential financial loss from a threat over one year. It's a key risk management metric.Outline change April 2027
172. 172AROARO, or Annualized Rate of Occurrence, estimates how often a threat or vulnerability will occur in one year.Outline change April 2027
173. 173AssessmentAssessment is the process of evaluating capabilities against standards to identify strengths and areas for improvement.Outline change April 2027
174. 174Assessor ConductAssessor Conduct outlines the ethical and professional standards for individuals evaluating technology systems, ensuring objectivity and integrity.Outline change April 2027
175. 175Asset managementAsset management systematically tracks all hardware and software in an IT environment for security, compliance, and cost control.Outline change April 2027
176. 176Attack Methodology FrameworksStructured approaches for understanding, analyzing, and simulating adversary tactics, techniques, and procedures in cybersecurity.Outline change April 2027
177. 177Attack NarrativesAttack Narratives are structured stories detailing how threat actors might compromise systems, applications, or data.Outline change April 2027
178. 178AttestationAn Attestation is a cybersecurity concept you will see in blueprints, job posts, and architecture discussions.Outline change April 2027
179. 179Attribute-based access controlABAC grants access based on attributes of users, resources, and the environment, offering flexible and granular control.Outline change April 2027
180. 180Automation GovernanceAutomation Governance provides a framework for managing automated systems, ensuring alignment with organizational goals and risk tolerance.Outline change April 2027
181. 181Azure SecurityAzure Security encompasses Microsoft's tools and practices for protecting cloud data, apps, and infrastructure.Outline change April 2027
182. 182Basics of IT & GovernanceIT & Governance provides the framework for managing technology resources effectively, securely, and in alignment with business goals.Outline change April 2027
183. 183best practicesBest practices are proven, effective methods and techniques that optimize performance, reduce risk, and ensure quality in a specific field or industry.Outline change April 2027
184. 184Business continuityBusiness continuity ensures an organization can keep operating during and after disruptive events, minimizing downtime and protecting its functions.Outline change April 2027
185. 185Business ResilienceBusiness resilience ensures an organization can continue operations despite disruptive events through planning, preparation, and response strategies.Outline change April 2027
186. 186Certificate pinningCertificate pinning is a security measure where clients trust only specific server certificates, preventing man-in-the-middle attacks.Outline change April 2027
187. 187CIS BenchmarksCIS Benchmarks are cybersecurity best practices for hardening systems and applications against cyber threats.Outline change April 2027
188. 188CISSP: Certified Information Systems Security ProfessionalCISSP: Certified Information Systems Security Professional is a professional certification topic covered in Accumentum training catalogs and PathKey™ guides.Outline change April 2027
189. 189CMMCCMMC is a DoD framework for assessing and improving defense contractor cybersecurity, ensuring protection of sensitive information.Outline change April 2027
190. 190compliance architectureCompliance architecture is the framework of policies, controls, and technologies ensuring adherence to regulatory and industry standards.Outline change April 2027
191. 191Compliance auditA compliance audit systematically checks if an organization follows relevant laws, regulations, standards, or policies.Outline change April 2027
192. 192Compliance for AICompliance for AI ensures AI systems adhere to laws, regulations, and ethical standards, promoting fairness and accountability.Outline change April 2027
193. 193Compliance in AI DevelopmentCompliance in AI development ensures AI systems adhere to laws, regulations, and ethical standards throughout their lifecycle.Outline change April 2027
194. 194Compliance in AI EngineeringCompliance in AI Engineering ensures AI systems adhere to standards, regulations, and ethical guidelines throughout their lifecycle.Outline change April 2027
195. 195Compliance in AI+ DataEnsuring AI and data practices meet legal, ethical, and policy standards for responsible development and deployment.Outline change April 2027
196. 196Compliance in AI SecurityCompliance in AI Security means following rules and standards for AI development and use, ensuring ethical and secure operations.Outline change April 2027
197. 197Compliance in ML SystemsCompliance in ML Systems ensures adherence to rules and ethics for secure, fair, and accountable machine learning development and deployment.Outline change April 2027
198. 198Compliance MonitoringCompliance monitoring is the continuous process of verifying adherence to policies, regulations, and standards across IT systems and operations.Outline change April 2027
199. 199Content Security PolicyContent Security Policy (CSP) is a web security standard that helps prevent attacks by controlling content sources.Outline change April 2027
200. 200Control gapA control gap is a weakness in security where a risk isn't covered by existing safeguards, creating an opening for threats.Outline change April 2027
201. 201Corrective controlCorrective controls fix security incidents after detection, restoring systems and limiting damage. They are vital for business continuity.Outline change April 2027
202. 202CORSCORS is a security feature allowing web servers to permit or deny resource requests from different web domains.Outline change April 2027
203. 203Cortex FundamentalsCortex Fundamentals are the core principles of Palo Alto Networks' XDR platform for unified threat detection and response.Outline change April 2027
204. 204Data classificationData classification organizes data by sensitivity and value, guiding security controls and compliance efforts.Outline change April 2027
205. 205Data GovernanceData governance is a framework of rules and policies for managing and protecting an organization's data assets throughout their lifecycle.Outline change April 2027
206. 206Data ManagementData management is the practice of governing and handling data throughout its lifecycle to ensure quality, security, and usability.Outline change April 2027
207. 207Data Protection and SharingSafeguarding sensitive information while enabling its controlled distribution to authorized parties.Outline change April 2027
208. 208Data RecoveryData recovery is the process of restoring lost, corrupted, or inaccessible data using specialized tools and techniques.Outline change April 2027
209. 209Data RetentionData retention policies define how long digital information is kept, balancing compliance, cost, and security needs.Outline change April 2027
210. 210Data subject rightsData subject rights are individual legal entitlements over personal data, crucial for privacy compliance and trust.Outline change April 2027
211. 211Data Visualization Best PracticesPrinciples for presenting data clearly and accurately to aid understanding and decision-making.Outline change April 2027
212. 212Design & Implement ProcessesDesign and Implement Processes creates structured workflows for IT systems to ensure consistency and efficiency.Outline change April 2027
213. 213Design for Organizational ComplexityDesign for Organizational Complexity structures IT systems to meet the varied needs of different business units within an enterprise.Outline change April 2027
214. 214Designing for security and complianceProactively building security and compliance into IT systems from the start to minimize risk and ensure adherence to standards.Outline change April 2027
215. 215Detective controlDetective controls identify security events after they happen, enabling response and prevention of recurrence.Outline change April 2027
216. 216Disaster recoveryDisaster recovery (DR) is a plan to restore IT operations after a disruptive event, ensuring business continuity.Outline change April 2027
217. 217Elliptic curve cryptographyElliptic curve cryptography (ECC) is a public key encryption method using elliptic curves for strong security with smaller keys.Outline change April 2027
218. 218EnglishEnglish is the precise, standardized use of language in technical documentation and communication to ensure clarity and reduce errors.Outline change April 2027
219. 219Ethical FrameworksEthical frameworks provide principles for making morally sound decisions in technology, guiding responsible actions and system design.Outline change April 2027
220. 220Ethical StandardsEthical standards are professional guidelines for responsible conduct in technology, ensuring fairness, honesty, and accountability.Outline change April 2027
221. 221EthicsEthics are the moral principles guiding professional conduct, ensuring integrity, honesty, and fairness in all actions and decisions.Outline change April 2027
222. 222Ethics and IntegrityEthics and integrity in technology mean adhering to moral principles and professional standards, ensuring IT systems are developed and used responsibly...Outline change April 2027
223. 223Evaluating Organizations Seeking CertificationAssessing an organization's readiness and adherence to standards for formal certification. Ensures integrity and value of certified entities.Outline change April 2027
224. 224Exam AttemptsExam Attempts define the allowed number of tries for a certification test, impacting your study and certification strategy.Outline change April 2027
225. 225Exam Day ProcessThe Exam Day Process details the steps candidates must follow on the day of their certification exam to ensure a smooth experience.Outline change April 2027
226. 226FISMAFISMA mandates federal agencies develop and implement information security programs to protect their data and systems.Outline change April 2027
227. 227Foundations of AI GovernanceFoundations of AI Governance provides principles and processes for ethical, responsible, and aligned AI development and deployment.Outline change April 2027
228. 228FrameworksA framework is a structured set of guidelines or best practices used to solve recurring problems or achieve specific goals.Outline change April 2027
229. 229GLBAGLBA is a US federal law protecting consumer data held by financial institutions, requiring safeguards and privacy policy communication.Outline change April 2027
230. 230GovernanceGovernance establishes the framework for organizational decision-making, accountability, and control, ensuring alignment with objectives and compliance.Outline change April 2027
231. 231Governance and Management of ITIT governance and management ensures technology aligns with business goals, driving effective and responsible IT resource utilization.Outline change April 2027
232. 232Governance: ESGGovernance: ESG integrates environmental, social, and governance factors into an organization's strategic decision-making and operational practices.Outline change April 2027
233. 233Governance for AI SolutionsAI governance provides structure for developing, deploying, and operating AI systems ethically and securely.Outline change April 2027
234. 234Governance for LLMsPolicies and controls for responsible LLM development, deployment, and use, ensuring alignment with objectives and ethics.Outline change April 2027
235. 235Governance of Enterprise ITGovernance of Enterprise IT (GEIT) is the framework ensuring IT aligns with business goals and risks are managed effectively.Outline change April 2027
236. 236Governance Program Management: DocumentationFormal records, policies, and standards defining and controlling a program's governance framework for transparency and accountability.Outline change April 2027
237. 237Governance, Quality & ControlsGovernance, Quality & Controls ensures IT systems and projects operate effectively, reliably, and securely through policies and standards.Outline change April 2027
238. 238Governing AI DeploymentGoverning AI Deployment establishes policies and procedures for responsible AI creation, implementation, and management.Outline change April 2027
239. 239Governing AI DevelopmentGoverning AI Development establishes policies and standards for ethical, secure, and objective AI system design and deployment.Outline change April 2027
240. 240Government & Law EnforcementGovernment and Law Enforcement defines the legal and regulatory rules for technology use in public sector and justice system contexts.Outline change April 2027
241. 241GRCGRC (Governance Risk and Compliance) integrates strategy for oversight, risk mitigation, and regulatory adherence.Outline change April 2027
242. 242Group PolicyGroup Policy (GPO) centrally manages Windows settings and security across a network, enforcing rules for users and computers.Outline change April 2027
243. 243Health, Safety & SecurityHealth, Safety & Security protects people, assets, and information from harm through integrated policies and practices.Outline change April 2027
244. 244HIPAAHIPAA sets national standards for protecting sensitive patient health information, impacting healthcare IT security and privacy.Outline change April 2027
245. 245Homomorphic encryptionHomomorphic encryption lets you compute on encrypted data without decrypting it, keeping sensitive information private during processing.Outline change April 2027
246. 246HoneynetA honeynet is a network of decoy systems that attracts and traps attackers, allowing observation of their methods without risking production systems.Outline change April 2027
247. 247HoneypotA honeypot is a decoy system designed to attract and trap cyber attackers, providing valuable threat intelligence.Outline change April 2027
248. 248HSTSHSTS is a web security policy that forces browsers to use HTTPS, preventing downgrade attacks and cookie hijacking.Outline change April 2027
249. 249IAM policyAn IAM policy is a JSON document defining permissions for cloud identities, specifying allowed actions on resources.Outline change April 2027
250. 250Identify an implementationRecognizing and understanding how a specific technology, solution, or process is put into practice within an organization or system.Outline change April 2027
251. 251Identity and access managementIdentity and access management (IAM) defines who can access digital resources and what they can do, ensuring security and compliance.Outline change April 2027
252. 252ImagesAn IT image is a complete system snapshot for rapid deployment, backup, and recovery, ensuring business continuity and standardization.Outline change April 2027
253. 253ImpactImpact is the effect or consequence of an action, event, or change on a system, process, or outcome.Outline change April 2027
254. 254implement governance for TeamsEstablish policies and procedures for how teams build, deploy, and manage technology solutions to ensure security, compliance, and alignment with busine...Outline change April 2027
255. 255ImplementationImplementation is the practical execution of plans, designs, or strategies to achieve a specific outcome.Outline change April 2027
256. 256Implementation of SecurityImplementation of Security is the practical application of security controls and measures within an organization's IT infrastructure and operations.Outline change April 2027
257. 257Information Security Core CompetenciesFundamental knowledge and skills for protecting digital assets and systems, encompassing risk management, threat intelligence, and incident response.Outline change April 2027
258. 258Infrastructure Security ArchitectureInfrastructure Security Architecture is the planned design of security controls across an organization's IT systems, ensuring robust protection from the...Outline change April 2027
259. 259Inherent riskInherent risk is the baseline risk level before controls are applied, based on an asset's natural susceptibility to threats.Outline change April 2027
260. 260Input validationInput validation ensures data meets criteria, preventing errors and security risks by checking incoming information before processing.Outline change April 2027
261. 261Intrusion detection systemAn Intrusion Detection System (IDS) monitors for malicious activity or policy violations on networks and systems, alerting security teams to potential t...Outline change April 2027
262. 262Intrusion prevention systemAn intrusion prevention system (IPS) monitors network traffic for malicious activity and automatically blocks detected threats in real time.Outline change April 2027
263. 263ISO 27001ISO 27001 is an international standard for information security management systems, providing a framework to protect sensitive data.Outline change April 2027
264. 264ISO 27002ISO 27002 is an international standard offering best practice guidelines for information security management and controls.Outline change April 2027
265. 265Labor RelationsLabor relations is the management of employer employee relationships, especially with unions, focusing on fair practices and productive work environments.Outline change April 2027
266. 266Landing Zone AcceleratorA Landing Zone Accelerator is a pre-configured cloud environment that rapidly deploys secure and compliant workloads, streamlining cloud adoption.Outline change April 2027
267. 267Laws, Standards & Risk FrameworksFoundational rules, guidelines, and structured approaches for managing cybersecurity risks and ensuring compliance.Outline change April 2027
268. 268Learning & DevelopmentLearning and Development (L&D) is the structured process of enhancing employee knowledge and skills for better performance and growth.Outline change April 2027
269. 269LegalLegal encompasses laws and regulations governing technology systems, impacting design, implementation, and operation to ensure compliance and mitigate r...Outline change April 2027
270. 270Level 1 PracticesFoundational, widely accepted methodologies and standards in a technology domain. Essential for effective and reliable operations.Outline change April 2027
271. 271Level 2 PracticesLevel 2 Practices are standardized methods for building, operating, and securing technology, ensuring consistency and efficiency.Outline change April 2027
272. 272Math: MeasurementMath: Measurement is the process of assigning numerical values to quantities using standardized units, essential for accurate data and decision making.Outline change April 2027
273. 273Microsoft Compliance SolutionsMicrosoft Compliance Solutions are tools and services that help organizations manage regulatory and legal obligations across their IT environments.Outline change April 2027
274. 274Microsoft Entra CapabilitiesMicrosoft Entra capabilities are identity and access management services that secure and manage user access to resources.Outline change April 2027
275. 275Mitigating AI RisksMitigating AI risks means identifying and addressing potential harms from AI systems to ensure responsible and ethical deployment.Outline change April 2027
276. 276Mitigating ControlsMitigating controls reduce the likelihood or impact of a risk, acting as secondary defenses to lessen potential severity or probability.Outline change April 2027
277. 277Network Automation FoundationNetwork Automation Foundation: the core principles and technologies for automated network management, configuration, and orchestration.Outline change April 2027
278. 278Network OperationsNetwork Operations manages, monitors, and maintains computer networks for availability, performance, and security.Outline change April 2027
279. 279Network Security PolicyA Network Security Policy defines rules for protecting computer networks and data, guiding security implementation and management.Outline change April 2027
280. 280NIST AI RMFThe NIST AI RMF offers a voluntary, flexible, and risk-based approach to managing artificial intelligence risks throughout the AI lifecycle.Outline change April 2027
281. 281NIST Cybersecurity FrameworkThe NIST Cybersecurity Framework (NIST CSF) provides a voluntary set of standards and best practices for managing cybersecurity risks.Outline change April 2027
282. 282NIST SP 800-53NIST SP 800-53 is a catalog of security and privacy controls for information systems and organizations.Outline change April 2027
283. 283NormalA Normal is the standard, accepted, or baseline configuration, process, or state for a given system or environment.Outline change April 2027
284. 284numbersNumbers are quantifiable metrics essential for measuring, tracking, and analyzing technology performance, security, and operations. They drive informed...Outline change April 2027
285. 285OperationOperation covers the essential activities for deploying, maintaining, and managing technology systems and services for reliable and secure functioning.Outline change April 2027
286. 286Operational DocumentationOperational documentation includes all written materials guiding the setup, use, maintenance, and troubleshooting of technology systems.Outline change April 2027
287. 287Operational ExcellenceOperational Excellence is a disciplined approach to improving business processes and IT systems for consistent, reliable, and efficient outcomes.Outline change April 2027
288. 288Operational ProceduresDocumented step-by-step instructions for performing IT tasks consistently and efficiently.Outline change April 2027
289. 289operations excellenceOperations excellence optimizes technology systems for efficiency, reliability, and effectiveness, ensuring seamless IT service delivery and robust secu...Outline change April 2027
290. 290OrganizationAn Organization is a logical grouping of cloud accounts for centralized management, governance, and unified policies.Outline change April 2027
291. 291Panel Review AssessmentA Panel Review Assessment is a structured evaluation by subject matter experts to identify risks and validate system implementation.Outline change April 2027
292. 292PCI DSSPCI DSS is a set of cybersecurity requirements to protect cardholder data during credit card transactions.Outline change April 2027
293. 293PgMP FoundationsPgMP Foundations covers the core principles for managing multiple, related programs to achieve strategic organizational benefits.Outline change April 2027
294. 294Physical securityPhysical security protects people, hardware, networks, and data from physical threats and damage.Outline change April 2027
295. 295PKIPublic Key Infrastructure (PKI) is a system for managing digital certificates and public key encryption, establishing trust online.Outline change April 2027
296. 296Planning: GovernancePlanning: Governance sets the rules and policies for IT systems and projects, ensuring alignment with business objectives and security standards.Outline change April 2027
297. 297PlaybooksA playbook is a documented set of procedures guiding teams through tasks, processes, or incident responses for consistency and efficiency.Outline change April 2027
298. 298PMI-CPMAI Certification StepsPMI-CPMAI Certification Steps outlines the structured process for validating AI system management and governance proficiency.Outline change April 2027
299. 299PoliciesPolicies are documented rules and guidelines that govern behavior, ensure compliance, and achieve organizational objectives.Outline change April 2027
300. 300PolicyA policy is a documented set of rules and guidelines established by an organization to govern behavior and decision making.Outline change April 2027
301. 301Policy CreationPolicy Creation develops documented rules and standards to govern behavior, manage risk, and ensure consistency in IT environments.Outline change April 2027
302. 302Post-quantum cryptographyPost-quantum cryptography (PQC) uses algorithms resistant to quantum computers, protecting data from future threats.Outline change April 2027
303. 303PracticePractice encompasses the established methods and procedures used to build, operate, and secure technology systems effectively.Outline change April 2027
304. 304PracticesPractices are established methods and procedures used by professionals to achieve specific goals in IT and project management.Outline change April 2027
305. 305Prisma Access TroubleshootingPrisma Access Troubleshooting is the systematic process of identifying, diagnosing, and resolving issues within Palo Alto Networks Prisma Access SASE pl...Outline change April 2027
306. 306Privacy Risk ManagementPrivacy Risk Management is the process of identifying, assessing, and mitigating risks to personal information, ensuring data protection and regulatory...Outline change April 2027
307. 307ProceduresProcedures are step-by-step instructions for completing tasks, ensuring consistency and efficiency in technical operations.Outline change April 2027
308. 308Program Governance: OversightProgram Governance: Oversight establishes the framework for monitoring and controlling a program's progress and performance.Outline change April 2027
309. 309Protection of Information AssetsSafeguarding digital and physical data from threats to ensure confidentiality, integrity, and availability.Outline change April 2027
310. 310Quality and EthicsQuality and Ethics means building and using technology responsibly, ensuring it's reliable, fair, and secure for everyone involved.Outline change April 2027
311. 311Quantum cryptographyQuantum cryptography uses quantum physics to secure communications, detecting eavesdropping by disturbing quantum states.Outline change April 2027
312. 312RecoveryRecovery is the process of restoring systems, data, or services to operational status after a disruption or failure.Outline change April 2027
313. 313Recovery time objectiveRecovery time objective (RTO) sets the maximum downtime allowed after a disruption, guiding recovery efforts and minimizing business impact.Outline change April 2027
314. 314RegulationsRegulations are formal rules governing behavior and standards in specific sectors, crucial for compliance and risk mitigation.Outline change April 2027
315. 315Regulatory RequirementsRules and mandates from governments or industries governing data handling and operations to ensure safety and fairness.Outline change April 2027
316. 316Relationship ManagementRelationship Management is understanding and documenting how technology components connect and interact within an organization.Outline change April 2027
317. 317RespondRespond means taking action to address IT incidents, minimize impact, and restore operations. It's about effective intervention.Outline change April 2027
318. 318Responsible AI Governance FrameworksResponsible AI Governance Frameworks ensure ethical, safe, and value-aligned AI development and deployment through structured policies and oversight.Outline change April 2027
319. 319Risk appetiteRisk appetite is the amount of risk an organization is willing to accept to achieve its goals. It sets boundaries for acceptable potential harm.Outline change April 2027
320. 320Risk, Ethics & GovernanceRisk, Ethics & Governance is the framework guiding threat mitigation, ethical conduct, and regulatory compliance in organizations.Outline change April 2027
321. 321Risk, Impact & AssuranceRisk, Impact & Assurance is a framework for evaluating threats, understanding consequences, and establishing controls to mitigate risks.Outline change April 2027
322. 322Risk registerA risk register tracks potential threats to an organization, detailing their likelihood, impact, and mitigation strategies for proactive management.Outline change April 2027
323. 323RunbookA runbook is a documented set of procedures guiding IT professionals through specific tasks, ensuring consistency and efficiency.Outline change April 2027
324. 324Same-origin policyThe Same-Origin Policy is a web browser security feature that prevents scripts from one origin from accessing resources from another.Outline change April 2027
325. 325SCAPSCAP is a set of NIST standards for automating security configuration, vulnerability, and compliance management.Outline change April 2027
326. 326Secure SDLCSecure SDLC integrates security into every phase of software development to proactively identify and mitigate vulnerabilities.Outline change April 2027
327. 327Securing the CloudSecuring the Cloud involves protecting cloud systems and data through strategies like access management, encryption, and monitoring.Outline change April 2027
328. 328Security ArchitectureSecurity architecture is the design and framework for an organization's information security, integrating controls into system design.Outline change April 2027
329. 329Security Architecture and EngineeringDesigning and building secure technology systems and networks from the ground up.Outline change April 2027
330. 330Security Architecture: Cloud CapabilitiesDesigning and implementing security controls for cloud environments, integrating security into cloud deployments.Outline change April 2027
331. 331Security auditA security audit systematically evaluates information systems to ensure they meet security requirements and are protected against threats.Outline change April 2027
332. 332Security baselineA security baseline is a documented set of minimum security requirements and configurations for an IT system, application, or network.Outline change April 2027
333. 333Security EngineeringSecurity Engineering is the practice of building and securing technology systems throughout their lifecycle. It ensures security is integral to design a...Outline change April 2027
334. 334Security FoundationsSecurity Foundations covers the essential principles and practices for protecting digital assets and information, forming the bedrock of cybersecurity.Outline change April 2027
335. 335Security headerSecurity headers are HTTP metadata that instruct browsers on secure content handling, crucial for preventing web vulnerabilities.Outline change April 2027
336. 336Security Infrastructure ArchitectureSecurity Infrastructure Architecture is the blueprint for an organization's cybersecurity defenses, integrating systems and processes to protect digital...Outline change April 2027
337. 337Security Operations & AdministrationSecurity Operations and Administration involves the ongoing processes and management needed to maintain an organization's information system security po...Outline change April 2027
338. 338Security Operations: Best PracticesSecurity Operations: Best Practices are the established guidelines for protecting digital assets and systems from cyber threats.Outline change April 2027
339. 339Security operations centerA Security Operations Center SOC is a centralized unit monitoring an organization's IT environment for security threats, detecting, analyzing, and respo...Outline change April 2027
340. 340Security Operations FoundationsSecurity Operations Foundations are the essential principles for building and maintaining a secure IT environment, crucial for risk reduction and incide...Outline change April 2027
341. 341Security Operations FundamentalsSecurity Operations Fundamentals covers the essential principles and practices for maintaining IT infrastructure security, including monitoring, detecti...Outline change April 2027
342. 342SHA-256SHA-256 is a cryptographic hash function that generates a unique 256-bit fingerprint for data, ensuring integrity and security.Outline change April 2027
343. 343SLESingle Loss Expectancy (SLE) is the estimated monetary loss from a single threat occurrence.Outline change April 2027
344. 344SOC 2SOC 2 is an AICPA framework for managing customer data securely, based on five trust service principles.Outline change April 2027
345. 345SOC WorkflowA SOC workflow is a standardized sequence of actions for detecting, analyzing, and responding to cybersecurity threats.Outline change April 2027
346. 346SOXThe Sarbanes-Oxley Act (SOX) is a US federal law enhancing corporate governance and financial reporting standards for public companies.Outline change April 2027
347. 347Splunk Architecture Design PrinciplesSplunk Architecture Design Principles are guidelines for building scalable, performant, and secure Splunk environments.Outline change April 2027
348. 348Splunk Best PracticesSplunk Best Practices are recommended methods for optimizing the Splunk platform for performance, scalability, and security.Outline change April 2027
349. 349StandardsStandards are agreed-upon rules or guidelines that ensure consistency, interoperability, and quality in technology and processes.Outline change April 2027
350. 350Strategic Global Human ResourcesStrategic Global Human Resources integrates workforce management across borders to align talent with business objectives and optimize global operations.Outline change April 2027
351. 351Supervision of AI SolutionsSupervision of AI Solutions means overseeing AI systems to ensure they function reliably, ethically, and securely throughout their lifecycle.Outline change April 2027
352. 352SuricataSuricata is an open source intrusion detection, intrusion prevention, and network security monitoring engine.Outline change April 2027
353. 353Systems Lifecycle ManagementSystems Lifecycle Management is the end-to-end process of overseeing IT systems from creation to disposal, ensuring efficiency and minimizing risk.Outline change April 2027
354. 354Team PracticesTeam Practices are established procedures for consistent, efficient, and high-quality team outcomes. They standardize workflows and minimize errors.Outline change April 2027
355. 355Technology ManagementTechnology Management is the strategic planning, implementation, and oversight of an organization's technology resources to align with business goals.Outline change April 2027
356. 356Third-party riskThird-party risk is the potential for security breaches or operational disruptions caused by external vendors and suppliers.Outline change April 2027
357. 357TLSTLS Transport Layer Security is a cryptographic protocol that secures network communications by encrypting data exchanged between clients and servers.Outline change April 2027
358. 358ToolkitA Toolkit is a collection of integrated technologies and methods used to achieve specific technology objectives efficiently.Outline change April 2027
359. 359Trusted Platform ModuleA Trusted Platform Module or TPM is a dedicated microcontroller that secures hardware through integrated cryptographic keys, providing a hardware root o...Outline change April 2027
360. 360Unified SASEUnified SASE converges networking and security into a single cloud-native service, simplifying operations and enhancing secure access.Outline change April 2027
361. 361Vendor WorkVendor Work involves managing external technology providers, crucial for security and efficiency.Outline change April 2027
362. 362WPA2WPA2 is a Wi-Fi security protocol using AES encryption to protect wireless networks from unauthorized access.Outline change April 2027
363. 363WPA3WPA3 is the latest standard for securing Wi-Fi networks, offering enhanced encryption and protection against common cyber threats.Outline change April 2027
364. 364Zero Trust ArchitectureZero Trust Architecture ZTA is a security model that assumes no implicit trust, requiring verification for all access attempts.Outline change April 2027
365. 365ZTAZero Trust Architecture ZTA is a security model that assumes no implicit trust, requiring verification for all access attempts.Outline change April 2027
366. 366Risk ManagementRisk management is the process of identifying, assessing, and controlling threats to information assets, crucial for proactive cybersecurity.Outline change April 2027
367. 367GDPRGDPR is an EU law setting strict rules for personal data collection, processing, and storage, granting individuals rights over their information.Outline change April 2027
368. 368Zero TrustZero Trust is a security model that assumes no user or device should be trusted by default, requiring verification for all access attempts.Outline change April 2027
369. 369Least privilegeLeast privilege grants users and systems only the minimum access needed to perform their jobs, reducing security risks.Outline change April 2027
370. 370Asymmetric encryptionAsymmetric encryption uses a pair of keys, one public and one private, for secure data encryption and decryption, forming the backbone of modern secure...Outline change April 2027