Study online at https://quizlet.com/_eeckba
1. Business Impact A process that assesses and identifies the potential effects of disruptions to a
Analysis (BIA) business operation.
2. SPOF A component or system that, if it fails, will cause the entire system to fail.
3. Quantitative Risk assessment that uses specific numerical values
4. Qualitative Risk assessment that uses non-numerical categories that are relative in nature,
such as high, medium, and low.
5. Risk appetite level, amount, or type of risk that the organization finds acceptable
6. Residual risk The remaining risk that exists after countermeasures have been applied.
7. IaaS Service model where cloud customer has the most responsibility and authority.
Cloud provider is only liable for the underlying hardware.
8. PaaS Service model where cloud customer loses more control because the cloud
provider is responsible for installing, maintaining, and administering the OS as
well as underlying hardware.
9. SaaS
, D320 80 Question Version (JYO2)
Study online at https://quizlet.com/_eeckba
Service model where cloud customer loses all control of the environment. Cloud
provider is responsible for all of the underlying hardware and software.
10. Homomorphic A method of processing data in the cloud while it remains encrypted.
encryption
11. Defense in depth A security strategy that involves implementing multiple overlapping layers of
security measures to protect an environment.
12. Data owner Organization that has collected or created the data.
13. Data Custodian Person or entity that is tasked with the daily maintenance and administration of
the data.
14. Data Processor Any org or person who manipulates, stores, or moves the data on behalf of the
data owner
15. Data discovery The process of creating an inventory or conducting e-discovery to identify and
locate data.
16. Label-based dis- A data discovery method that is aided by labels created by the data owner.
covery
17. Metadata-based A data discovery method that involves discovering data using metadata traits and
discovery characteristics.
18. Content-based Refers to finding information or resources based on their characteristics, attrib-
discovery utes, or content rather than relying on predefined keywords or categories.
, D320 80 Question Version (JYO2)
Study online at https://quizlet.com/_eeckba
19. Structured data Data that is organized and formatted in a way that is easily searchable and can be
processed by computers.
20. Unstructured qualitative data; natural-language text; incorporate media (audio, video, images);
data contains JSON, XML, binary objects (images encoded as text strings); important
for data analytic strategies; noSQL
21. IRM (Information A set of controls and technologies used to protect certain types of assets, such as
Rights Manage- intellectual property or sensitive information.
ment)
22. Copyright Legal protection for expressions of ideas, such as literary, artistic, or musical
works.
23. DMCA (Digi- Legislation that provides additional protections for creative works in digital for-
tal Millennium mats.
Copyright Act)
24. Trademarks Legal protection for specific words, phrases, symbols, or designs that distinguish
a product or service.
25. Patent A grant of exclusivity that gives the holder the right to produce, sell, and import
an invention.
26. PKI (Public Key A framework for secure communication using cryptographic techniques, such as
Infrastructure) digital certificates and public-private key pairs.
27. File-based stor- A method of storing data as files and folders, similar to how data is organized on
age a traditional file system.
28. Block storage Allocates a large chunk of storage for access as a disk volume managed by the
operating system.
29. Object storage Stores files as individual objects managed by the cloud service provider.