1.0 Security Concepts

Front

Security operations center (SOC)

Back

The location where security professionals monitor and protect critical information assets in an organization.

Front

Development and operations (DevOps)

Back

A combination of software development and systems operations and refers to the practice of integrating one discipline with the other.

Front

DevSecOps

Back

A combination of software development, security operations, and systems operations and refers to the practice of integrating each discipline with the others.

Front

Computer incident response team (CIRT)/computer security incident response team (CSIRT)/computer emergency response team (CERT)

Back

Team with responsibility for incident response. The CSIRT must have expertise across a number of business domains (IT, HR, legal, and marketing, for instance).

Front

Security control

Back

A technology or procedure put in place to mitigate vulnerabilities and risk and to ensure the confidentiality, integrity, and availability (CIA) of information.

Front

Managerial

Back

A category of security control that provides oversight of information systems.

Front

Operational

Back

A category of security control that is implemented by people.

Front

Technical

Back

A category of security control that is implemented as a system.

Front

Physical

Back

A category of security control that is implemented by hardware used to deter or detect, such as alarms, gateways, locks, lighting, and security cameras.

Front

Preventive

Back

A type of security control that acts before an incident to eliminate or reduce the likelihood that an attack can succeed.