Information Security and IT Concepts

Front

Adequate Security

Back

Security commensurate with the risk and the magnitude of harm resulting from the loss, misuse or unauthorized access to or modification of information. Source: OMB Circular A-130

Front

Administrative Controls

Back

Controls implemented through policy and procedures. Examples include access control processes and requiring multiple personnel to conduct a specific operation.

Front

Adverse Events

Back

Events with a negative consequence, such as system crashes, network packet floods, unauthorized use of system privileges, defacement of a web page or execution of malicious code that destroys data.

Front

Application Programming Interface (API)

Back

A set of routines, standards, protocols, and tools for building software applications to access a web-based software application or web tool.

Front

Application Server

Back

A computer responsible for hosting applications to user workstations. NIST SP 800-82 Rev.2

Front

Artificial Intelligence

Back

The ability of computers and robots to simulate human intelligence and behavior.

Front

Asset

Back

Anything of value that is owned by an organization, including tangible items like information systems and physical property, and intangible assets like intellectual property.

Front

Asymmetric Encryption

Back

An algorithm that uses one key to encrypt and a different key to decrypt the input plaintext.

Front

Audit

Back

Independent review and examination of records and activities to assess the adequacy of system controls, to ensure compliance with established policies and operational procedures. NIST SP 1800-15B

Front

Authentication

Back

The act of identifying or verifying the eligibility of a station, originator, or individual to access specific categories of information.