Cybersecurity Dictionary for 2019

CMM

Capability Maturity Model - a methodology used to develop and refine an organization's software development process. 

Credential Stuffing

A type of cybersecurity breach which allows hackers to take information from a  previous breach to gain access to other accounts

Cyber Hygiene

Performing basic tasks to protect digital assets. For example, use strong passwords, do not write them down for others to see, and change them frequently. Validate the sender before clicking on links/URLs within email or text messages. Do not send a Social Security number or bank account number to another person via email.

Cybersecurity

The state of being protected against the criminal or unauthorized use of electronic data, or the measures taken to achieve this

Data Breach

A security incident in which information is accessed without authorization

Data Mining

The practice of examining large databases in order to generate new information

Data Governance

The overall management of the availability, usability, integrity and security of data used in an enterprise. 

Honeypot

A decoy computer system for trapping hackers or tracking unconventional or new hacking methods

Insider Threat

A malicious threat to an organization that comes from people within the organization, such as employees, former employees, contractors or business associates, who have inside information concerning the organization's security practices, data and computer systems.

Integrated Risk Management

A set of practices and processes supported by a risk-aware culture and enabling technologies, that improves decision making and performance through an integrated view of how well an organization manages its unique set of risks.

Malware

Software that is specifically designed to disrupt, damage, or gain unauthorized access to a computer system

MyVCM

My Virtual Compliance Manager - our platform that’s helping customers build, operate and showcase compliance to over 100 standards globally.

Phishing

The fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers

SCF

Secure Controls Framework - a series of documented processes used to define policies and procedures around the implementation and ongoing management of information security controls in an enterprise environment.

Spoofing

When a hacker impersonates another device or user on a network in order to steal data, spread malware, or bypass access controls.

Spyware

Software that enables a user to obtain covert information about another's computer activities by transmitting data covertly from their hard drive.