GUIDE
1. Business Impact A process that assesses and identifies the potential ettects of disruptions to a
Analysis (BIA) business operation.
2. SPOF A component or system that, if it fails, will cause the entire system to fail.
3. Quantitative Risk assessment that uses specific numerical values
4. Qualitative Risk assessment that uses non-numerical categories that are relative in nature,
such as high, medium, and low.
5. Risk appetite level, amount, or type of risk that the organization finds acceptable
6. Residual risk The remaining risk that exists after countermeasures have been applied.
7. IaaS Service model where cloud customer has the most responsibility and authority.
Cloud provider is only liable for the underlying hardware.
8. PaaS Service model where cloud customer loses more control because the cloud
provider is responsible for installing, maintaining, and administering the OS as
well as underlying hardware.
9. SaaS
, Service model where cloud customer loses all control of the environment. Cloud
provider is responsible for all of the underlying hardware and software.
10. Homomorphic A method of processing data in the cloud while it remains encrypted.
encryption
11. Defense in depth A security strategy that involves implementing multiple overlapping layers of
security measures to protect an environment.
12. Data owner Organization that has collected or created the data.
13. Data Custodian Person or entity that is tasked with the daily maintenance and administration of
the data.
14. Data Processor Any org or person who manipulates, stores, or moves the data on behalf of the
data owner
15. Data discovery The process of creating an inventory or conducting e-discovery to identify and
locate data.
16. Label-based dis- A data discovery method that is aided by labels created by the data owner.
covery
17. Metadata-based A data discovery method that involves discovering data using metadata traits and
discovery characteristics.
18. Content-based Refers to finding information or resources based on their characteristics, attrib-
discovery utes, or content rather than relying on predefined keywords or categories.
, 19. Structured data b Data that is organized and formatted in a way that is easily searchable and can be
b b b b b b b b b b b b b b b
bprocessed by computers. b b
20. Unstructured qualitative data; natural-language text; incorporate media (audio, video, images);
b b b b b b b b
data
b contains JSON, XML, binary objects (images encoded as text strings); important for
b b b b b b b b b b b b
data analytic strategies; noSQL
b b b b
21. IRM (Information A set of controls and technologies used to protect certain types of assets, such as
b b b b b b b b b b b b b b b
Rights Manage-
b intellectual property or sensitive information.
b b b b b b
ment)
b
22. Copyright Legal protection for expressions of ideas, such as literary, artistic, or musical
b b b b b b b b b b b
works.
23. DMCA (Digi- b Legislation that provides additional protections for creative works in digital for-
b b b b b b b b b b
tal Millennium
b bmats.
bCopyright
bAct)
24. Trademarks Legal protection for specific words, phrases, symbols, or designs that distinguish
b b b b b b b b b b
a product or service.
b b b b
25. Patent A grant of exclusivity that gives the holder the right to produce, sell, and import
b b b b b b b b b b b b b b
an invention.
b
26. PKI (Public Key
b b A framework for secure communication using cryptographic techniques, such as
b b b b b b b b b
Infrastructure)
b digital certificates and public-private key pairs.
b b b b b b
27. File-based stor- b A method of storing data as files and folders, similar to how data is organized on a
b b b b b b b b b b b b b b b b
age
b traditional file system.
b b b
28. Block storage b Allocates a large chunk of storage for access as a disk volume managed by the
b b b b b b b b b b b b b b
operating system. b
b b