Credential Service Provider (CSP)
A Credential Service Provider (CSP) is an entity or system that establishes a subscriber account, verifies or receives identity evidence as required,…
Security, Risk & Compliance
Security controls, fraud, operational risk and regulatory compliance.
673Terms
0Reviewed
Terms (673)
Credential Store
Credential Store is a protected system used to store, retrieve, rotate, and control access to passwords, API keys, tokens, certificates, signing material,…
Credential Stuffing
Credential Stuffing is a fraud or abuse pattern that automatically tests username and password pairs stolen from other services against new accounts…
Credential Theft
Credential theft is the deliberate acquisition of passwords, keys, tokens, session data, or recovery factors for unauthorized access or impersonation. Credential Theft…
Credential Vault
A credential vault securely stores and controls access to sensitive secrets, often providing encryption, rotation, auditing, and temporary retrieval. A credential vault…
Credential-on-File
A credential-on-file is payment information stored by a merchant or provider for later transactions authorized under an agreed customer relationship. Credential-on-file refers…
Credit Risk
Credit risk is the possibility of financial loss because a borrower, issuer, customer, or counterparty fails to meet payment obligations. Decision-makers use…
Critical Incident
A critical incident is a severe event requiring immediate coordinated response because it threatens essential services, assets, people, compliance, or organizational survival.…
Cross-Chain Laundering
Cross-Chain Laundering is the use of multiple blockchains, bridges, swaps, and virtual assets to conceal the origin, ownership, movement, or destination of…
Cross-Chain Replay Attack
A Cross-Chain Replay Attack occurs when a valid signed transaction or message intended for one blockchain, fork, domain, bridge, or contract is…
Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) is a web vulnerability in which untrusted content is executed as script or active browser content within another user’s…
Crypto ATM
A Crypto ATM is a physical kiosk that enables users to buy or sell virtual assets using cash, cards, bank transfers, or…
Crypto Forensics
Crypto Forensics is the preservation, analysis, and interpretation of blockchain and off-chain evidence to investigate transactions, wallets, services, ownership, compromise, fraud, and…
Crypto Mixer
A Crypto Mixer is a service or protocol designed to obscure links between virtual-asset inputs and outputs by pooling, transforming, delaying, or…
Crypto Payment Compliance
Crypto Payment Compliance is a compliance or privacy requirement that applies relevant financial, sanctions, consumer, tax, privacy, licensing, and reporting requirements to…
Crypto Payment Risk
Crypto payment risk is the combined exposure arising from digital-asset pricing, settlement, networks, wallets, compliance, fraud, and operational dependencies. A score for…
Crypto-Asset Service Provider (CASP)
A crypto-asset service provider is an entity legally defined to offer specified crypto-asset services, with scope depending on the applicable jurisdiction. Crypto-Asset…
Crypto-Asset White Paper
A Crypto-Asset White Paper is a formal disclosure describing a crypto asset, its issuer or offeror, rights, technology, project, risks, governance, and…
Cryptocurrency Security
Cryptocurrency Security is a security mechanism or control discipline that protects digital assets, keys, transactions, wallets, applications, networks, and supporting infrastructure from…
Cryptoeconomic Security
Cryptoeconomic security uses cryptographic verification and economic incentives to make dishonest behavior costly, detectable, or strategically unattractive within decentralized systems. Cryptoeconomic security…
Cryptographic Security
Cryptographic security is the protection achieved when algorithms, parameters, protocols, keys, implementations, and operations resist defined adversarial capabilities. Cryptographic security describes confidence…
Cryptographic Signature
A cryptographic signature uses a private key to authorize or authenticate data that others can verify with corresponding public information. A cryptographic…
CSRF Token
A CSRF Token is an unpredictable value bound to a user session or request context that a server validates to help prevent…
Custodian Risk
Custodian risk is the possibility that an asset custodian loses, misuses, freezes, misrecords, or cannot return assets under its control. Decision-makers use…