https://padlet.com/keziagwyn/classglossary A list of terms with their definitions en-us 2018-05-07 09:52:42 UTC 2025-11-05 17:23:49 UTC hello@padlet.com https://padlet-assets.s3.amazonaws.com/icons/Clouds.png keziagwyn https://padlet.com/keziagwyn/classglossary/wish/258456899 Any situation that involves danger or loss. Risk is pretty much present in our everyday lives. Although it depends on certain circumstances, every time a person makes a decision or decides to do a certain action, risk is always connected to it.

Example: developing a new software. Chances are, it won't be saleable to the public or it won't be approved.]]> 2018-05-07 10:12:24 UTC https://padlet.com/keziagwyn/classglossary/wish/258456899 TashaPanda https://padlet.com/keziagwyn/classglossary/wish/258457731 A path or means by which a hacker gains access to a computer or network server in order to deliver a payload or malicious outcome. Attack vectors enable hackers to exploit system vulnerabilities, including the human element.

 https://searchsecurity.techtarget.com/definition/attack-vector ]]> 2018-05-07 10:17:23 UTC https://padlet.com/keziagwyn/classglossary/wish/258457731 TashaPanda https://padlet.com/keziagwyn/classglossary/wish/258457843 The act of being protected against criminal or unauthorised use of electronic material/data. ]]> 2018-05-07 10:18:02 UTC https://padlet.com/keziagwyn/classglossary/wish/258457843 TashaPanda https://padlet.com/keziagwyn/classglossary/wish/258457909 A security incident in which sensitive, protected and/or confidential data has been stolen by an unauthorised personnel. ]]> 2018-05-07 10:18:30 UTC https://padlet.com/keziagwyn/classglossary/wish/258457909 keziagwyn https://padlet.com/keziagwyn/classglossary/wish/258458320 This is the act of making certain information available only to the parties involved. No other people are allowed to know what the information contains.

Example: keeping a client's files in a place with a password or lock.]]> 2018-05-07 10:20:56 UTC https://padlet.com/keziagwyn/classglossary/wish/258458320 keziagwyn https://padlet.com/keziagwyn/classglossary/wish/258459165 This is simply giving permission or approval. This usually happens when a person needs to sign a certain document, authorizing that he/she has read the document, and is giving his/her approval. It may also be in a form of writing a letter, authorizing a certain person to act on his/her behalf.]]> 2018-05-07 10:25:48 UTC https://padlet.com/keziagwyn/classglossary/wish/258459165 keziagwyn https://padlet.com/keziagwyn/classglossary/wish/258459660 ISMS or Information Security Management System is a set of frameworks that contain policies and procedures for tackling security risks in an organization. The focus of an ISMS is to ensure business continuity by minimizing all security risks to information assets and limiting security breach impacts to a bare minimum.

(c) Techopedia
https://www.techopedia.com/definition/16515/information-security-management-system-isms]]> 2018-05-07 10:28:42 UTC https://padlet.com/keziagwyn/classglossary/wish/258459660 keziagwyn https://padlet.com/keziagwyn/classglossary/wish/258460554 In the context of computer security, threat refers to anything that has the potential to cause serious harm to a person's computer system. It is something that may or may not happen, but has the capacity to cause serious damage.

(c) Techopedia
https://www.techopedia.com/definition/25263/threat

Example: threats from virus attacks]]> 2018-05-07 10:33:33 UTC https://padlet.com/keziagwyn/classglossary/wish/258460554 sjdixon1997 https://padlet.com/keziagwyn/classglossary/wish/258721855 Definition – The protection of a person, building, organization or country against attacks or crime.
Example – A web application needs good security in order to keep data safe from attackers trying to steal it. To do this the web application would have things like authorization for logins and designating different entities different functions that they need to use

]]> 2018-05-07 21:42:56 UTC https://padlet.com/keziagwyn/classglossary/wish/258721855 sjdixon1997 https://padlet.com/keziagwyn/classglossary/wish/258721936 Definition – The information on the application must be corrected and trusted. Integrity includes making sure that all the data is correct inside the application as decisions and code will rely on the information. If the information is tampered with then it is a breach in the integrity of the application.
Example – if someone was able to hack a website and change the content of the webpage this would be a breach in the integrity of the webpage.

]]> 2018-05-07 21:43:23 UTC https://padlet.com/keziagwyn/classglossary/wish/258721936 sjdixon1997 https://padlet.com/keziagwyn/classglossary/wish/258722000 Definition – Multiple defensive lines or fortifications to make many steps into hacking into the server or application.
Example – In a fortress there will be an outer wall and multiple walls and soldiers before they can get to the palace. This should be the same for web and app security. When a hacker is trying to hack into a web page or database they should not have access to all the data in the database after breaking through the first wall of security. There should be multiple types of security in it so that it is very hard and time consuming for the hacker to break through all of them before the company finds out and has time to fix the problem.

]]> 2018-05-07 21:43:51 UTC https://padlet.com/keziagwyn/classglossary/wish/258722000 sjdixon1997 https://padlet.com/keziagwyn/classglossary/wish/258722059 Definition – Least privilege is the concept of restricting the access to certain users and accounts. The user must have a certain type of authorization to access different functions inside the application.
Example – somebody who has signed up to a free trial for some software will only get access to a small amount of functions so that they can get a taste for the software and once they purchase the full version they will get authorized and have access to all the functions they are promised.

]]> 2018-05-07 21:44:17 UTC https://padlet.com/keziagwyn/classglossary/wish/258722059 sarab_kang https://padlet.com/keziagwyn/classglossary/wish/259508811 2018-05-10 03:16:10 UTC https://padlet.com/keziagwyn/classglossary/wish/259508811 TashaPanda https://padlet.com/keziagwyn/classglossary/wish/261388271 Is a term used to describe the process by which an organization handles a data breach or cyberattack, including the way the organization attempts to manage the consequences of the attack or breach (the “incident”).

https://digitalguardian.com/blog/what-incident-response]]> 2018-05-16 21:13:04 UTC https://padlet.com/keziagwyn/classglossary/wish/261388271 TashaPanda https://padlet.com/keziagwyn/classglossary/wish/261388727 In computer security, a vulnerability is a weakness which can be exploited by a Threat Actor, such as an attacker, to perform unauthorised actions within a computer system. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness. In this frame, vulnerability is also known as the attack surface.

https://en.wikipedia.org/wiki/Vulnerability_(computing)]]> 2018-05-16 21:15:41 UTC https://padlet.com/keziagwyn/classglossary/wish/261388727