🔐 Cybersecurity Glossary
Over 265 professional cybersecurity terms in English & Arabic — your comprehensive reference for the cybersecurity world
265 terms
16 categories
47 frameworks
All
🏛 Governance & Strategy 35
⚖ Risk Management 17
🔑 Identity & Access 14
🌐 Network Security 16
🔒 Data Protection 11
⚡ Threat & Attack 22
🚨 Incident Response 13
☑ Compliance & Audit 12
🔐 Cryptography 11
☁ Cloud Security 9
💻 Application Security 11
§ Privacy & Data Law 12
🛡 Security Operations 17
♻ Business Continuity 9
🇸🇦 Saudi Regulations 14
🛡️ Platform Tools 1
NCA_ECC (122)
SAMA_CSF (76)
PCI_DSS (47)
ISO_27001 (39)
PDPL (34)
NIST_CSF (29)
Array (25)
NCA ECC (20)
SAMA CSF (20)
NCA_CSCC (14)
17 terms
⚖ Attack Surface
سطح الهجوم
The total sum of all vulnerabilities and entry points that an attacker could potentially exploit.
⚖ Business Impact Analysis
BIA
تحليل تأثير الأعمال
A process that identifies and evaluates the potential effects of disruption to critical business operations.
⚖ Common Vulnerabilities and Exposures
CVE
الثغرات والتعرضات الشائعة
A publicly disclosed list of cybersecurity vulnerabilities, each assigned a unique identifier for tracking and reference.
⚖ Common Vulnerability Scoring System
CVSS
نظام تسجيل الثغرات المشترك
An open framework for communicating the characteristics and severity of software vulnerabilities using a numerical score from 0 to 10.
⚖ Cyber Insurance
التأمين السيبراني
Insurance products designed to help organizations mitigate financial losses from cybersecurity incidents and data breaches.
⚖ FAIR Model
FAIR
نموذج FAIR
Factor Analysis of Information Risk — a quantitative risk analysis methodology for information security and operational risk.
⚖ Key Risk Indicator
KRI
مؤشر المخاطر الرئيسي
A metric used to provide an early signal of increasing risk exposures in various areas of the organization.
⚖ Residual Risk
المخاطر المتبقية
The risk that remains after security controls have been applied.
⚖ Risk Appetite
قبول المخاطر
The amount and type of risk that an organization is willing to accept in pursuit of its objectives.
⚖ Risk Assessment
RA
تقييم المخاطر
The process of identifying, analyzing, and evaluating risks to determine their likelihood and potential impact on the organization.
⚖ Risk Quantification
التقدير الكمي للمخاطر
The process of assigning monetary values to potential losses from cybersecurity risks using statistical methods.
⚖ Risk Register
سجل المخاطر
A documented repository of identified risks, their analysis, and planned response actions.
⚖ Risk Treatment
معالجة المخاطر
The process of selecting and implementing measures to modify risk, including avoidance, mitigation, transfer, or acceptance.
⚖ Third-Party Risk Management
TPRM
إدارة مخاطر الأطراف الثالثة
The process of analyzing and controlling risks presented by third parties to an organization's data and operations.
⚖ Threat
التهديد
Any circumstance or event with the potential to adversely impact organizational operations through unauthorized access, destruction, disclosure, or modification of information.
⚖ Threat Modeling
نمذجة التهديدات
A structured approach for identifying and prioritizing potential threats to a system and determining countermeasures.
⚖ Vulnerability
Vuln
الثغرة الأمنية
A weakness in a system, application, or process that could be exploited by a threat to gain unauthorized access or cause harm.