Cybersecurity Terminology
This taxonomy defines the cybersecurity terms, taken from the ISO27002 document, that are used on the ARK Platform.
Corrective
Detective
Organizational controls
People controls
Physical controls
Preventive
Technological controls
Acceptable use of information and other associated assets
Access control
Access rights
Access to source code
Addressing information security within supplier agreements
Application security requirements
Assessment and decision on information security events
Authentication information
Cabling security
Capacity management
Change management
Classification of information
Clear desk and clear screen
Clock synchronization
Collection of evidence
Compliance with policies, rules and standards for information security
Confidentiality or non-disclosure agreements
Configuration management
Contact with authorities
Contact with special interest groups
Data leakage prevention
Data masking
Disciplinary process
Documented operating procedures
Equipment maintenance
Equipment siting and protection
ICT readiness for business continuity
Identity management
Independent review of information security
Information access restriction
Information backup
Information deletion
Information security awareness, education and training
Information security during disruption
Information security event reporting
Information security for use of cloud services
Information security in project management
Information security in supplier relationships
Information security incident management planning and preparation
Information security roles and responsibilities
Information transfer
Installation of software on operational systems
Intellectual property rights
Inventory of information and other associated assets
Labelling of information
Learning from information security incidents
Legal, statutory, regulatory and contractual requirements
Logging
Management of technical vulnerabilities
Management responsibilities
Managing information security in the ICT supply chain
Monitoring activities
Monitoring, review and change management of supplier services
Networks security
Outsourced development
Physical entry
Physical security monitoring
Physical security perimeters
Policies for information security
Privacy and protection of PII
Privileged access rights
Protecting against physical and environmental threats
Protection against malware
Protection of information systems during audit testing
Protection of records
Redundancy of information processing facilities
Remote working
Response to information security incidents
Responsibilities after termination or change of employment
Return of assets
Screening
Secure authentication
Secure coding
Secure development life cycle
Secure disposal or re-use of equipment
Secure system architecture and engineering principles
Securing offices, rooms and facilities
Security of assets off-premises
Security of network services
Security testing in development and acceptance
Segregation of duties
Segregation of networks
Separation of development, test and production environments
Storage media
Supporting utilities
Terms and conditions of employment
Test information
Threat intelligence
Use of cryptography
Use of privileged utility programs
User endpoint devices
Web filtering
Working in secure areas