Internal Audit
Internal audit is an independent and objective assurance and advisory function that evaluates whether governance, risk management, and internal controls are designed…
Security, Risk & Compliance
Security controls, fraud, operational risk and regulatory compliance.
673Terms
0Reviewed
Terms (673)
Invoice Fraud
Invoice Fraud is the creation, alteration, substitution, or misuse of an invoice or payment instruction to obtain money, goods, credentials, or sensitive…
Jurisdiction Risk
Jurisdiction risk is exposure created by the laws, courts, regulators, politics, enforcement, and operating conditions connected to a location. A score for…
Key Compromise
Key compromise occurs when an unauthorized person obtains or gains practical control over a secret used to sign transactions, authenticate systems or…
Key Loss Risk
Key loss risk is the possibility that cryptographic keys become unavailable, unusable, or irrecoverable, preventing access, signing, decryption, or control. A score…
Key Management
Key management is the complete lifecycle of cryptographic keys, from generation and storage to permitted use, rotation, backup and retirement.
Key Person Risk
Key Person Risk is the operational, governance, fraud, continuity, or compliance risk created when critical knowledge, authority, access, or relationships depend excessively…
Key Risk
Key risk is the combined exposure arising from cryptographic key generation, custody, use, availability, rotation, recovery, compromise, and destruction. Key Risk must…
Know Your Business (KYB)
KYB can collect registration records, trading names, addresses, licenses, tax information, directors, beneficial owners, authorized representatives, products, markets, and expected transaction activity.
Know Your Customer (KYC)
Know Your Customer refers to customer-identification and due-diligence measures used by regulated or risk-sensitive organizations.
Kubernetes Security
Kubernetes Security is a security mechanism or control discipline that protects clusters, workloads, images, identities, secrets, networks, admission paths, and control-plane components…
KYC Payment
A KYC payment is a transaction accepted, processed, or released only after specified customer identification and verification requirements are satisfied. A KYC…
KYC Refresh
A KYC refresh is the periodic or trigger-based review and update of customer identity, beneficial ownership, business activity, risk rating, and supporting…
Layering (Market Manipulation)
Layering is a market manipulation technique in which a trader places multiple non-bona-fide orders at different price levels to create a false…
Legal Custody Risk
Legal custody risk is the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract.…
Legal Risk
Legal risk is the possibility of loss or disruption from laws, contracts, rights, disputes, enforcement, or uncertain legal classification. Legal Risk must…
Legitimate Interest
Legitimate interest is a data-processing lawful basis used when processing is necessary for a legitimate purpose and that interest is not overridden…
Leverage Risk
Leverage risk is the possibility that borrowed funds or derivative exposure magnifies losses, margin demands, liquidation, or insolvency. A score for Leverage…
Liquidation Risk
Liquidation risk is the possibility that collateral or positions are forcibly closed at unfavorable prices after required financial thresholds are breached. Decision-makers…
Liquidity Risk
Liquidity risk includes market liquidity and funding liquidity.
Liveness Risk
Liveness risk is the possibility that a system stops making required progress even though its safety properties may remain intact. A score…
Long-Range Attack
A long-range attack creates an alternative blockchain history beginning far in the past to deceive nodes that lack a trusted recent reference.…
Low-Risk Merchant
A low-risk merchant is assessed as presenting comparatively limited fraud, dispute, compliance, fulfillment, and financial exposure under a defined methodology. Low-Risk Merchant…
Magecart Attack
A Magecart attack is a web-skimming attack in which malicious JavaScript or a compromised third-party component captures payment or personal data entered…