Foundations Terms Week 1 Flashcards
Compliance
The process of adhering to internal standards and external regulations. Enables organizations to avoid fines and security breaches
Security frameworks
Guidelines used for building plans to help mitigate risks and threats to data and privacy
Security controls
Safeguards designed to reduce specific security risks
Security posture
An organization’s ability to manage its defense of critical assets and data and react to change
Threat actor
Any person or group who presents a security risk
Internal threat
A current or former employee, external vendor or trusted partner who poses a security risk
Network Security
The practice of keeping an organization’s network infrastructure secure from unauthorized access
Cloud Security
The process of ensuring that assets stored in the cloud are properly configured and access to those assets is limited to authorized users
Programming
A process that can be used to create a specific set of instructions for a computer to execute tasks
Cybersecurity
The practice of ensuring confidentiality, integrity and availability of information by protecting networks, devices, people and data from unauthorized access or criminal exploitation
PII
Any information used to infer an individual’s identity
SPII
A specific type of PII that falls under stricter handling guidelines
Technical skills
Skills that require knowledge of specific tools, procedures and policies
Threat
Any circumstance or event that can negatively impact assets
Transferable skills
Skills from other areas that can apply to different careers