🔐 Cybersecurity Glossary

A responsibility assignment matrix defining who is Responsible, Accountable, Consulted, and Informed for each task.

The maximum acceptable amount of data loss measured in time before a disruption that an organization can tolerate. RPO determines the frequency of data backups and defines how much data can be lost without causing significant harm to business operations or regulatory compliance.

The maximum acceptable length of time that a business process, application, or system can be down after a disaster or disruption before the organization experiences unacceptable consequences, used to prioritize recovery efforts and allocate resources.

A group of security professionals authorized to simulate real-world attacks to test an organization's defenses.

The process of addressing and resolving identified security findings, vulnerabilities, or compliance gaps.

The risk that remains after security controls have been applied.

The right of individuals to have their personal data erased when it is no longer necessary for the purpose it was collected.

Data subject right under PDPL to request deletion of their personal data held by an organization under specific circumstances, including withdrawal of consent or when data is no longer necessary for the original purpose.

The systematic process of identifying, assessing, prioritizing, and mitigating cybersecurity risks to an organization's information assets, operations, and reputation. It involves continuous monitoring and treatment of risks to maintain them at acceptable levels aligned with the organization's risk appetite.

The process of assigning monetary values to potential losses from cybersecurity risks using statistical methods.

A documented repository of identified risks, their analysis, and planned response actions.

The process of selecting and implementing measures to modify risk, including avoidance, mitigation, transfer, or acceptance.

A method of restricting system access to authorized users based on their role within the organization.

An access control method within IAM that assigns system permissions to users based on their organizational roles rather than individual identities. RBAC simplifies access management by grouping permissions into roles, ensuring users only have access necessary to perform their job functions in accordance with the principle of least privilege.

An asymmetric cryptographic algorithm widely used for secure data transmission using a public and private key pair.

A security technology that is built into an application to detect and prevent real-time attacks.