| CISM (Certified Information Security Manager) | A certification for information security managers focusing on governance, risk management, and compliance. |
| CISSP (Certified Information Systems Security Professional) | A certification for experienced security practitioners, managers, and executives, covering a broad range of security practices and principles. |
| Information Security Governance | The framework and policies designed to ensure that an organization’s information security strategies align with business goals and objectives. |
| Risk Management | The process of identifying, assessing, and controlling threats to an organization’s capital and earnings. |
| Compliance | Adhering to laws, regulations, policies, and standards regarding information security. |
| Cybersecurity | The practice of protecting systems, networks, and programs from digital attacks. |
| Information Security | The practice of preventing unauthorized access, use, disclosure, disruption, modification, inspection, recording or destruction of information. |
| Security Architecture | The framework and components that provide security controls and measures to protect information. |
| Access Control | Mechanisms or policies that restrict access to data, systems, and resources. |
| Threat Analysis | The process of assessing and identifying potential threats to an organization’s information security. |
| Vulnerability Assessment | The process of identifying, quantifying, and prioritizing vulnerabilities in a system. |
| Penetration Testing | Simulated cyber attacks against your computer system to check for exploitable vulnerabilities. |
| Incident Response | The approach and procedures for addressing and managing the aftermath of a security breach or attack. |
| Business Continuity Planning | The process of creating systems of prevention and recovery to deal with potential threats to a company. |
| Disaster Recovery | Strategies and processes to recover and protect a business IT infrastructure in the event of a disaster. |
| Encryption | The method by which information is converted into secret code that hides the information’s true meaning. |
| Public Key Infrastructure (PKI) | A framework for managing digital certificates and public-key encryption to secure communications. |
| Identity and Access Management (IAM) | A framework of business processes, policies and technologies that facilitates the management of electronic identities. |
| Security Policy | A set of rules and practices that specify or regulate how a system or organization provides security for physical and information assets. |
| Ethical Hacking | An authorized practice of bypassing system security to identify potential data breaches and threats in a network. |
| Cloud Security | A set of policies, controls, procedures, and technologies that work together to protect cloud-based systems, data, and infrastructure. |
| Data Privacy | The aspect of information technology that deals with the ability an organization or individual has to determine what data in a computer system can be shared with third parties. |
