Cybersecurity Terminology
type: Ontology
abstract: This taxonomy defines the cybersecurity terms, taken from the ISO27002 document, that are used on the ARK Platform.
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-04-08
modified: 2024-04-08
publisher: openark.adaptcentre.ie
rights: https://creativecommons.org/licenses/by/4.0/
source: Cybersecurity Terminology
preferred namespace prefix: arkcscOWL
version info: 0.1
introduction: This taxonomy defines the cybersecurity terms, taken from the ISO27002 document, that are used on the ARK Platform.

Acceptable use of information and other associated assets
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Access control
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Proection
has related concept: Protect

Access rights
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Access to source code
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Secure configuration

Addressing information security within supplier agreements
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: Supplier relationships security

Application security requirements
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Assessment and decision on information security events
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Organizational controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Information security event management
has related concept: Integerity
has related concept: Respond

Authentication information
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Cabling security
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Capacity management
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Continuity
has related concept: Detect
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Change management
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Classification of information
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Identify
has related concept: Information protection
has related concept: Integerity
has related concept: Protection

Clear desk and clear screen
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Confidentiality
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Clock synchronization
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Technological controls
definition: See ISO27002:2022
has related concept: Defence
has related concept: Detect
has related concept: Information security event management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Collection of evidence
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Information security event management
has related concept: Integerity
has related concept: Respond

Compliance with policies, rules and standards for information security
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Information security assurance
has related concept: Integerity
has related concept: Legal and compliance
has related concept: Protect

Confidentiality or non-disclosure agreements
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Human resource security
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Supplier relationships

Configuration management
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Secure configuration

Contact with authorities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Governance
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Recover
has related concept: Resillience
has related concept: Respond

Contact with special interest groups
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Govrnance
has related concept: Integerity
has related concept: Protect
has related concept: Recover
has related concept: Respond

Corrective
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Data leakage prevention
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Confidentiality
has related concept: Detect
has related concept: Information protection
has related concept: Protect
has related concept: Protection

Data masking
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Confidentiality
has related concept: Information protection
has related concept: Protect
has related concept: Protection

Detective
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Disciplinary process
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Human resource security
has related concept: Integerity
has related concept: Protect
has related concept: Respond

Documented operating procedures
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Application security
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Continuity
has related concept: Defence
has related concept: Governance and Eocosystem
has related concept: Identity and access management
has related concept: Information security event management
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection
has related concept: Recover
has related concept: Secure configuration
has related concept: System and network security
has related concept: Threat and vulnera-bility management

Equipment maintenance
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection
has related concept: Resilience

Equipment siting and protection
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

ICT readiness for business continuity
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Continuity
has related concept: Resilience
has related concept: Respond

Identity management
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Independent review of information security
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Information security event management
has related concept: Integerity
has related concept: Protect

Information access restriction
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Information backup
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Continuity
has related concept: Integerity
has related concept: Protection
has related concept: Recover

Information deletion
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Confidentiality
has related concept: Information protection
has related concept: Legal and compliance
has related concept: Protect
has related concept: Protection

Information security awareness, education and training
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Human resource security
has related concept: Integerity
has related concept: Protect

Information security during disruption
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Continuity
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Resilience
has related concept: Respond

Information security event reporting
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: People controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Information security event management
has related concept: Integerity

Information security for use of cloud services
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Information security assurance
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Supplier relationships security

Information security in project management
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: Governance and Ecossystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Information security in supplier relationships
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: Supplier relationships security

Information security incident management planning and preparation
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Governance
has related concept: Identity and access management
has related concept: Integerity
has related concept: Recover
has related concept: Respond

Information security roles and responsibilities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: Resilience

Information transfer
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Installation of software on operational systems
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Secure configuration

Intellectual property rights
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Legal and compliance

Inventory of information and other associated assets
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection

Labelling of information
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Learning from information security incidents
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Identify
has related concept: Information security event management
has related concept: Integerity
has related concept: Protect

Legal, statutory, regulatory and contractual requirements
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Legal and compliance
has related concept: Protection

Logging
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Information security event management
has related concept: Integerity
has related concept: Protection

Management of technical vulnerabilities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Threat and vulnerability management

Management responsibilities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity

Managing information security in the ICT supply chain
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protection
has related concept: Supplier relationships security

Monitoring activities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Detective
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defemce
has related concept: Detect
has related concept: Information security event management
has related concept: Integerity
has related concept: Respond

Monitoring, review and change management of supplier services
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Information security assurance
has related concept: Integerity
has related concept: Protection
has related concept: Supplier relationships security

Networks security
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Detect
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Organizational controls
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Outsourced development
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Detect
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Supplier relationships security
has related concept: System and network security

People controls
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Physical controls
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Physical entry
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Physical security monitoring
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Physical security perimeters
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Policies for information security
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: Governance and Ecosystem
has related concept: Identify
has related concept: Integerity
has related concept: Resilience

Preventive
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Privacy and protection of PII
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identify
has related concept: Information protection
has related concept: Integerity
has related concept: Legal and compliance
has related concept: Protect
has related concept: Protection

Privileged access rights
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Protecting against physical and environmental threats
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Protection against malware
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Detective
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Protection of information systems during audit testing
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Gveronance and Ecosystem
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Protection of records
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Identify
has related concept: Information protection
has related concept: Integerity
has related concept: Legal and compliance
has related concept: Protect

Redundancy of information processing facilities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Continuity
has related concept: Protect
has related concept: Protection
has related concept: Resilience

Remote working
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Information protection
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Response to information security incidents
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Organizational controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Information security event management
has related concept: Integerity
has related concept: Recover
has related concept: Respond

Responsibilities after termination or change of employment
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Human resource security
has related concept: Integerity
has related concept: Protect

Return of assets
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Screening
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Human resource security
has related concept: Integerity
has related concept: Protect

Secure authentication
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Secure coding
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Secure development life cycle
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Secure disposal or re-use of equipment
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Confidentiality
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Secure system architecture and engineering principles
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Securing offices, rooms and facilities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Security of assets off-premises
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Security of network services
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Security testing in development and acceptance
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Identify
has related concept: Information security assurance
has related concept: Integerity
has related concept: Protection
has related concept: System and network security

Segregation of duties
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Cybersecurity Terminology
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance
has related concept: Governance and Ecosystem
has related concept: Identity and access management
has related concept: Integerity
has related concept: Protect

Segregation of networks
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Separation of development, test and production environments
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Storage media
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Supporting utilities
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Detective
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Detect
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection

Technological controls
type: Class
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
definition: See ISO27002:2022

Terms and conditions of employment
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: People controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Governance and Ecosystem
has related concept: Human resource security
has related concept: Integerity
has related concept: Protect

Test information
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Confidentiality
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Threat intelligence
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Corrective
type: Detective
type: Organizational controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Defence
has related concept: Detect
has related concept: Identigy
has related concept: Integerity
has related concept: Resillience
has related concept: Respond
has related concept: Threat and vulnerability management

Use of cryptography
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Secure configuration

Use of privileged utility programs
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Application security
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: Secure configuration
has related concept: System and network security

User endpoint devices
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Asset management
has related concept: Availability
has related concept: Confidentiality
has related concept: Information protection
has related concept: Integerity
has related concept: Protect
has related concept: Protection

Web filtering
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Preventive
type: Technological controls
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Protect
has related concept: Protection
has related concept: System and network security

Working in secure areas
type: Class
type: NamedIndividual
contributor: Junli Liang
contributor: Rob Brennan
created: 2024-03-14
source: ISO/IEC 27002:2022(E)
type: Physical controls
type: Preventive
definition: See ISO27002:2022
has related concept: Availability
has related concept: Confidentiality
has related concept: Integerity
has related concept: Physical security
has related concept: Protect
has related concept: Protection