Glossary

JWT

JSON Web Token: a compact, self-contained token format that carries claims (such as identity and permissions) in a signed, and optionally encrypted, structure, widely used for authentication and authorization in web and API systems.

Joiner-Mover-Leaver

The model describing the three key transitions in the identity lifecycle, joining (onboarding and provisioning access), moving (role changes and access adjustment), and leaving (deprovisioning), that access management must handle reliably.

Journalctl

The command-line tool for querying the systemd journal on Linux, the centralized log of system and service events. Defenders use it to investigate activity, service behavior, and signs of compromise on Linux hosts.

Jump Servers

Hardened intermediary hosts that administrators must connect through to reach sensitive systems, concentrating and controlling administrative access so it can be monitored, restricted, and kept off the general network.

Just Culture

An organizational culture that responds to mistakes by learning rather than blaming, distinguishing honest error from recklessness, so people report incidents and problems openly instead of hiding them out of fear.

Just-In-Time Access

Temporary access granted only when needed and removed afterward.

Just-in-Time Learning

Delivering security education at the moment it is relevant, such as a brief prompt when a risky action occurs, rather than only in scheduled training, so guidance lands when it is most likely to change behavior.

Just-in-Time Privileged Access

Granting privileged access only for the moment it is needed and automatically revoking it afterward, rather than leaving standing admin rights, so the window an attacker could abuse privileged accounts is minimized.