Security Champion
A security champion is a designated person within a product, engineering, operations, or business team who helps integrate security practices, communicates risks,…
Glossary terms starting with S
Numbers and symbols are grouped under #. Letter matching ignores case and uses the first displayed title character.
Security Checklist
A security checklist is a structured list of required checks or actions used to support consistent security implementation and review. Reliable results…
Security Control
A security control is a safeguard or countermeasure designed to prevent, detect, limit, correct, or recover from security-related risk. Examples include authentication,…
Security Control Validation
Security Control Validation is the evidence-based process of determining whether a security control is correctly implemented, operating as intended, and producing the…
Security Deposit
A security deposit is value held as collateral against damage, default, unpaid obligations, misconduct, or other contractually defined risk. A security deposit…
Security Engineering
Security Engineering is a security mechanism or control discipline that applies systematic design, implementation, testing, and operational methods to build systems that…
Security Event
A security event is an observable occurrence relevant to security that may be benign, suspicious, policy-violating, or evidence of compromise. Security events…
Security Exception
A security exception is formally approved deviation from a required security policy, baseline, control, or configuration for a defined scope and period.…
Security Gateway
A security gateway is a controlled intermediary that inspects, filters, authenticates, or protects traffic between systems, networks, users, or trust zones. Security…
Security Governance
Security governance establishes decision rights, accountability, policies, oversight, resources, and assurance for managing security risk across an organization. Security governance connects organizational…
Security Hardening
Security Hardening is a security mechanism or control discipline that reduces attack surface and strengthens resistance by configuring systems to remove unnecessary…
Security Header
A security header is protocol metadata that instructs clients or intermediaries to apply specific protections when handling requests, responses, or content. Web…
Security Incident
A security incident is an event or series of events that actually or potentially jeopardizes security and requires coordinated response. Security Incident…
Security Incident Response
Security incident response is the coordinated process for preparing, detecting, analyzing, containing, eradicating, recovering from, and learning from security incidents. Security Incident…
Security Investigation
Security Investigation is an incident-management concept that collects and analyzes evidence to determine what happened, how, when, why, by whom, and with…
Security Key
A security key is a physical or logical credential used to prove identity, authorize access, or protect cryptographic operations. Security key may…
Security Logging and Alerting Failures
Security Logging and Alerting Failures is a class of security weakness in which important events are not recorded, logs lack useful context…
Security Misconfiguration
A security misconfiguration is an unsafe or unintended setting that weakens protection, exposes assets, or permits unauthorized behavior. Security misconfigurations include default…
Security Operations Center (SOC)
A Security Operations Center is a centralized function that monitors, detects, investigates, coordinates, and responds to security threats and incidents. Security Operations…
Security Policy
A security policy is an approved statement of mandatory security objectives, responsibilities, rules, and decision requirements within a defined scope. Security policies…
Security Posture
Security posture is the current overall condition of an organization’s security capabilities, exposure, controls, readiness, and ability to recover. Security posture reflects…
Security Questionnaire
Security Questionnaire is an assurance or evaluation activity that collects structured information about an organization’s controls, practices, systems, incidents, and risk management…
Security Token
A security token is a blockchain token representing or marketed as a regulated financial security, such as equity, debt, fund interests, revenue…
Security Token Offering (STO)
A Security Token Offering is a fundraising or asset-distribution process in which an issuer sells blockchain tokens representing regulated securities or investment…