A
- Access Control
- Access Control (Physical and Logical)
- Access Control Mechanism
- Accidental Insider Threat
- Active Attack
- Active Content
- Administrator Rights
- Advanced Persistent Threat
- Adversary (or Attacker)
- Air Gap
- Allow List, Permit List (Deprecated: whitelist)
- Antivirus Software
- Application Fuzzing
- Application Proxy
- Application Security Assessment
- Attack
- Attack Signature
- Attack Surface
- Attacker
- Attribution
- Authentication
- Authenticity
- Authorization
- Availability
B
C
- Ciphertext
- Cloud Computing
- Command and Control (C&C) Server
- Compromised Credentials
- Computer Emergency Response Team (CERT)
- Computer Network Defense
- Confidentiality
- Containment
- Content Delivery Network (CDN)
- Continuity of Operations Plan
- Coronavirus Advisory
- Countermeasure
- Critical (Confidential) Information
- Crypto-Mining or Cryptojacking
- Cryptographic Algorithm
- Cryptography
- Cyber Criminals
- Cybersecurity
- Cybersquatting
D
- Data Breach
- Data Exfiltration
- Data Loss
- Data Loss Prevention
- Decrypt
- Decryption
- Deepfakes
- Demilitarized Zone (DMZ)
- Denial of Service
- Digital Forensics
- Digital Signature
- Discretionary Access Controls (DAC)
- Distributed Denial of Service
- DNS Reflection and Amplification Attacks
- Drive-By Download
- Dwell Time
- Dynamic Code Analysis
E
F
H
I
- Identification
- Identity and Access Management
- ILOVEYOU Virus
- Incident
- Incident Management
- Incident Reponse
- Incident Response Plan
- Indicator
- Industrial Control System
- Information and Communication(s) Technology
- Information Assurance
- Information Assurance Compliance
- Information Dissemination
- Information Resources Management (IRM)
- Information Security Policy
- Information Sharing
- Information System Resilience
- Information Systems Security Operations
- Information Technology
- Infrastructure as a Service (IaaS)
- Insider
- Insider Threat
- Integrated Risk Management
- Integrity
- Intellectual Property
- Internet Control Message Protocol (ICMP)
- Internet Message Access Protocol (IMAP)
- Internet of Things (IoT)
- Internet Protocol Security (IPSec)
- Interoperability
- Intrusion
- Intrusion Detection
- Investigation
M
N
O
P
- Packet Sniffing
- Passive Attack
- Passphrase
- Password
- Password Cracking
- Password Manager
- Penetration Testing
- Personal Identifying Information
- Phishing
- Plaintext
- Platform as a Service (PaaS)
- Point-to-Point Tunneling Protocol (PPTP)
- Polyinstantiation
- Precursor
- Privacy
- Private Key
- Privileged User
- Public Key
- Public Key Cryptography
- Public Key Infrastructure
R
- Radio Frequency Identification (RFID)
- RADIUS Authentication
- Ransomware
- Recovery
- Red Team
- Red Team Exercise
- Redundancy
- Remote Access Trojan (RAT)
- Remote Desktop Protocol (RDP)
- Response
- Responsible Disclosure
- Revenge Porn
- Reverse Engineering
- Reverse Intent
- Reverse Proxy
- Revision
- Risk
- Risk Acceptance (Accept)
- Risk Analysis
- Risk Assessment
- Risk Avoidance
- Risk Management
- Risk Mitigation
- Risk Transfer
- Risk-Based Data Management
- Root Cause Analysis
- Rootkit
S
- Sandboxing
- Script Kiddie
- Secret Key
- Secure Shell (SSH)
- Secure Socket Layer (SSL)
- Security Automation
- Security Event and Incident Management (SEIM)
- Security Operations
- Security Operations Center (SOC)
- Security Policy
- Sensitive (Restricted) Information
- Separation of Duties
- Signature
- SIM Swapping
- Situational Awareness
- Smishing
- Social Engineering
- Social Media Bots
- Software as a Service (SaaS)
- Software Assurance
- Spam
- Spear-Phishing
- Spoofing
- Spyware
- SQL Slammer Virus
- Static Code Analysis
- Steganography
- Stuxnet
- Subject
- Supervisory Control and Data Acquisition
- Supply Chain
- Supply Chain Risk Management
- Supply Chain Threat
- Swatting
- Symmetric Cryptography
- Symmetric Key
- System Integrity
