Course 8 glossary

Cybersecurity

---

Terms and definitions from Course 8

B

Business continuity plan: A document that outlines the procedures to sustain business operations during and after a significant disruption

C

Confidential data: Data that often has limits on the number of people who have access to it

D

Data controller: A person that determines the procedure and purpose for processing data

Data processor: A person that is responsible for processing data on behalf of the data controller

Data protection officer (DPO): An individual that is responsible for monitoring the compliance of an organization's data protection procedures

E

Elevator pitch: A brief summary of your experience, skills, and background

Escalation policy: A set of actions that outlines who should be notified when an incident alert occurs and how that incident should be handled

I

Improper usage: An incident type that occurs when an employee of an organization violates the organization’s acceptable use policies

Incident escalation: The process of identifying a potential security incident, triaging it, and handing it off to a more experienced team member

M

Malware infection: An incident type that occurs when malicious software designed to disrupt a system infiltrates an organization’s computers or network

O

OWASP Top 10: A globally recognized standard awareness document that lists the top 10 most critical security risks to web applications 

P

Private data: Information that should be kept from the public

Public data: Data that is already accessible to the public and poses a minimal risk to the organization if viewed or shared by others

R

Rapport: A friendly relationship in which the people involved understand each other’s ideas and communicate well with each other

S

Security mindset: The ability to evaluate risk and constantly seek out and identify the potential or actual breach of a system, an application, or data

Sensitive data: A type of data that includes personally identifiable information (PII), sensitive personally identifiable information (SPII), or protected health information (PHI)

Stakeholder: An individual or a group that has an interest in any decision or activity of an organization

STAR method: An interview technique used to answer behavioral and situational questions 

U

Unauthorized access: An incident type that occurs when an individual gains digital or physical access to a system or an application without permission 

V

Visual dashboard: A way of displaying various types of data quickly in one place

 

---