(ISC)2 Certified in Cybersecurity Exam
Application Programming Interface (API) A set of routines, standards, protocols, and tools for building software
applications to access a web-based software application or web tool.
Application Server A computer responsible for hosting applications to user workstations.
Artificial Intelligence (Ai) The ability of computers and robots to simulate human intelligence and
behavior.
Asset Anything of value that is owned by an organization. Assets include both
tangible items such as information systems and physical property and
intangible assets such as intellectual property.
Asymmetric Encryption An algorithm that uses one key to encrypt and a different key to decrypt the
input plaintext.
Audit Independent review and examination of records and activities to assess the
adequacy of system controls, to ensure compliance with established policies
and operational procedures.
Authentication The act of identifying or verifying the eligibility of a station, originator, or
individual to access specific categories of information. Typically, a measure
designed to protect against fraudulent transmissions by establishing the validity
of a transmission, message, station or originator.
Authorization The right or permission that is granted to a system entity to access a system
resource.
Availability Ensuring timely and reliable access to and use of information by authorized
users. Also means that systems and data are accessible at the time users need
them.
Baseline A documented, lowest level of security configuration allowed by a standard or
organization.
Biometric Biological characteristics of an individual, such as a fingerprint, hand geometry,
voice, or iris patterns.
Bit The most essential representation of data (zero or one) at Layer 1 of the Open
Systems Interconnection (OSI) model.
Bot Malicious code that acts like a remotely controlled "robot" for an attacker, with
other Trojan and worm capabilities.
, (ISC)2 Certified in Cybersecurity Exam
Breach The loss of control, compromise, unauthorized disclosure, unauthorized
acquisition or any similar occurrence where: a person other than an authorized
user accesses or potentially accesses personally identifiable information; or an
authorized user accesses personally identifiable information for other than an
authorized purpose.
Broadcast Broadcast transmission is a one-to-many (one-to-everyone) form of sending
internet traffic.
Business Continuity (BC) Actions, processes and tools for ensuring an organization can continue critical
operations during a contingency.
Business Continuity Plan (BCP) The documentation of a predetermined set of instructions or procedures that
describe how an organization's mission/business processes will be sustained
during and after a significant disruption.
Business Impact Analysis (BIA) An analysis of an information system's requirements, functions, and
interdependencies used to characterize system contingency requirements and
priorities in the event of a significant disruption.
Byte The byte is a unit of digital information that most commonly consists of eight
bits.
Checksum A digit representing the sum of the correct digits in a piece of stored or
transmitted digital data, against which later comparisons can be made to
detect errors in the data.
Ciphertext The altered form of a plaintext message so it is unreadable for anyone except
the intended recipients. In other words, it has been turned into a secret.
Classification Classification identifies the degree of harm to the organization, its stakeholders
or others that might result if an information asset is divulged to an unauthorized
person, process or organization. In short, classification is focused first and
foremost on maintaining the confidentiality of the data, based on the data
sensitivity.
Classified or Sensitive Information Information that has been determined to require protection against
unauthorized disclosure and is marked to indicate its classified status and
classification level when in documentary form.
Cloud Computing A model for enabling ubiquitous, convenient, on-demand network access to a
shared pool of configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly provisioned and
released with minimal management effort or service provider interaction.
Application Programming Interface (API) A set of routines, standards, protocols, and tools for building software
applications to access a web-based software application or web tool.
Application Server A computer responsible for hosting applications to user workstations.
Artificial Intelligence (Ai) The ability of computers and robots to simulate human intelligence and
behavior.
Asset Anything of value that is owned by an organization. Assets include both
tangible items such as information systems and physical property and
intangible assets such as intellectual property.
Asymmetric Encryption An algorithm that uses one key to encrypt and a different key to decrypt the
input plaintext.
Audit Independent review and examination of records and activities to assess the
adequacy of system controls, to ensure compliance with established policies
and operational procedures.
Authentication The act of identifying or verifying the eligibility of a station, originator, or
individual to access specific categories of information. Typically, a measure
designed to protect against fraudulent transmissions by establishing the validity
of a transmission, message, station or originator.
Authorization The right or permission that is granted to a system entity to access a system
resource.
Availability Ensuring timely and reliable access to and use of information by authorized
users. Also means that systems and data are accessible at the time users need
them.
Baseline A documented, lowest level of security configuration allowed by a standard or
organization.
Biometric Biological characteristics of an individual, such as a fingerprint, hand geometry,
voice, or iris patterns.
Bit The most essential representation of data (zero or one) at Layer 1 of the Open
Systems Interconnection (OSI) model.
Bot Malicious code that acts like a remotely controlled "robot" for an attacker, with
other Trojan and worm capabilities.
, (ISC)2 Certified in Cybersecurity Exam
Breach The loss of control, compromise, unauthorized disclosure, unauthorized
acquisition or any similar occurrence where: a person other than an authorized
user accesses or potentially accesses personally identifiable information; or an
authorized user accesses personally identifiable information for other than an
authorized purpose.
Broadcast Broadcast transmission is a one-to-many (one-to-everyone) form of sending
internet traffic.
Business Continuity (BC) Actions, processes and tools for ensuring an organization can continue critical
operations during a contingency.
Business Continuity Plan (BCP) The documentation of a predetermined set of instructions or procedures that
describe how an organization's mission/business processes will be sustained
during and after a significant disruption.
Business Impact Analysis (BIA) An analysis of an information system's requirements, functions, and
interdependencies used to characterize system contingency requirements and
priorities in the event of a significant disruption.
Byte The byte is a unit of digital information that most commonly consists of eight
bits.
Checksum A digit representing the sum of the correct digits in a piece of stored or
transmitted digital data, against which later comparisons can be made to
detect errors in the data.
Ciphertext The altered form of a plaintext message so it is unreadable for anyone except
the intended recipients. In other words, it has been turned into a secret.
Classification Classification identifies the degree of harm to the organization, its stakeholders
or others that might result if an information asset is divulged to an unauthorized
person, process or organization. In short, classification is focused first and
foremost on maintaining the confidentiality of the data, based on the data
sensitivity.
Classified or Sensitive Information Information that has been determined to require protection against
unauthorized disclosure and is marked to indicate its classified status and
classification level when in documentary form.
Cloud Computing A model for enabling ubiquitous, convenient, on-demand network access to a
shared pool of configurable computing resources (e.g., networks, servers,
storage, applications, and services) that can be rapidly provisioned and
released with minimal management effort or service provider interaction.
