Internal Audit
Internal audit is an independent and objective assurance and advisory function that evaluates whether governance, risk management, and internal controls are designed…
Security, Risk & Compliance
Security controls, fraud, operational risk and regulatory compliance.
673Terms
0Reviewed
Terms (673)
Invoice Fraud
Invoice Fraud is the creation, alteration, substitution, or misuse of an invoice or payment instruction to obtain money, goods, credentials, or sensitive…
Jurisdiction Risk
Jurisdiction risk is exposure created by the laws, courts, regulators, politics, enforcement, and operating conditions connected to a location. A score for…
Key Compromise
Key Compromise is a confirmed or reasonably suspected loss of the confidentiality, integrity, authenticity, or exclusive control of a cryptographic key. It…
Key Loss Risk
Key loss risk is the possibility that cryptographic keys become unavailable, unusable, or irrecoverable, preventing access, signing, decryption, or control. A score…
Key Management
Key Management is the governed lifecycle of cryptographic keys, including generation, registration, storage, distribution, activation, rotation, backup, recovery, revocation, archival, and destruction.…
Key Person Risk
Key Person Risk is the operational, governance, fraud, continuity, or compliance risk created when critical knowledge, authority, access, or relationships depend excessively…
Key Risk
Key risk is the combined exposure arising from cryptographic key generation, custody, use, availability, rotation, recovery, compromise, and destruction. Key Risk must…
Know Your Business (KYB)
Know Your Business is the process of verifying a business customer or merchant, its legal existence, ownership, controllers, activities, and relevant risk…
Know Your Customer (KYC)
Know Your Customer is the process of identifying customers, verifying relevant information, understanding relationships, and applying risk-based ongoing review. Know Your Customer…
Kubernetes Security
Kubernetes Security is a security mechanism or control discipline that protects clusters, workloads, images, identities, secrets, networks, admission paths, and control-plane components…
KYC Payment
A KYC payment is a transaction accepted, processed, or released only after specified customer identification and verification requirements are satisfied. A KYC…
KYC Refresh
A KYC refresh is the periodic or trigger-based review and update of customer identity, beneficial ownership, business activity, risk rating, and supporting…
Layering (Market Manipulation)
Layering is a market manipulation technique in which a trader places multiple non-bona-fide orders at different price levels to create a false…
Legal Custody Risk
Legal custody risk is the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract.…
Legal Risk
Legal risk is the possibility of loss or disruption from laws, contracts, rights, disputes, enforcement, or uncertain legal classification. Legal Risk must…
Legitimate Interest
Legitimate interest is a data-processing lawful basis used when processing is necessary for a legitimate purpose and that interest is not overridden…
Leverage Risk
Leverage risk is the possibility that borrowed funds or derivative exposure magnifies losses, margin demands, liquidation, or insolvency. A score for Leverage…
Liquidation Risk
Liquidation risk is the possibility that collateral or positions are forcibly closed at unfavorable prices after required financial thresholds are breached. Decision-makers…
Liquidity Risk
Liquidity risk is the possibility that assets cannot be sold, converted, withdrawn, or obtained quickly enough without unacceptable loss or disruption. Decision-makers…
Liveness Risk
Liveness risk is the possibility that a system stops making required progress even though its safety properties may remain intact. A score…
Long-Range Attack
A long-range attack creates an alternative blockchain history beginning far in the past to deceive nodes that lack a trusted recent reference.…
Low-Risk Merchant
A low-risk merchant is assessed as presenting comparatively limited fraud, dispute, compliance, fulfillment, and financial exposure under a defined methodology. Low-Risk Merchant…
Magecart Attack
A Magecart attack is a web-skimming attack in which malicious JavaScript or a compromised third-party component captures payment or personal data entered…