Glossary

GRC Workpaper Integrity

GRC workpaper integrity preserves the objective, scope, criteria, procedure, population, sample, evidence references, performers, dates, results, exceptions, conclusions, review, and limitations of assessment work.

GRC to Adjacent Roles

The career moves available from GRC into related fields, such as security operations, privacy, audit, security architecture, or management, leveraging GRC's broad exposure to frameworks, risk, and the business as a springboard.

GRC vs Operations

The distinction between GRC's oversight-and-assurance role and the operational teams that actually run controls, GRC sets policy, assesses risk, and verifies, while operations owns and performs the day-to-day security work.

GTFOBins

A curated catalog of legitimate Unix/Linux binaries that can be abused to bypass security controls or escalate privilege, such as a normally-benign tool that can run shell commands. Defenders use it to anticipate living-off-the-land abuse.

Gap Analysis from Metrics

Using measured data about a policy's performance, awareness scores, incident trends, compliance rates, to identify where it is falling short, so revisions target real, evidenced gaps rather than guesses.

Ghidra Workflow

The process of using Ghidra, a free reverse-engineering tool, to analyze a malware binary, loading the sample, navigating its disassembly and decompiled code, and annotating findings to understand how the malware works.

GitOps

An operational model where the desired state of infrastructure and applications is declared in Git and automatically reconciled to the live environment, making Git the single source of truth for deployments and changes.

GitOps Security

Securing the GitOps pipeline and its trust relationships, protecting the Git repository, signing commits and images, controlling what the reconciler can deploy, so the 'Git as source of truth' model cannot be subverted by an attacker.

Global Privacy Regulatory Landscape

The worldwide patchwork of privacy laws beyond the GDPR, such as US state laws, and regimes in other regions, that organizations operating across borders must track and reconcile, since requirements differ by jurisdiction.

Go/No-Go Decision Points

Explicit checkpoints where an authorized owner decides whether recovery, failover, reconnection, or return to normal operation may proceed.

Golden Image

A pre-configured, hardened base image, of a VM or container, that is built once to a secure standard and reused as the trusted starting point for new workloads, so every instance inherits a known-good, consistent configuration.

Golden Ticket Attack

A Golden Ticket attack uses compromised krbtgt key material to forge Kerberos ticket-granting tickets for identities in an Active Directory domain.

Google Cloud IAM Assessment

Google Cloud IAM assessment traces inherited allow and deny policy, organization policy, groups, roles, service accounts, federation, impersonation, token creation, keys, and cross-project access.

Governance Audit Trail

A governance audit trail links the identity fact, policy, request, displayed context, attributable decision, fulfillment, target result, reconciliation, review, exception, and final removal for material access.

Governance Decision Rights

Governance decision rights identify who recommends, informs, supplies evidence, decides, accepts residual risk, funds action, and is accountable within delegated limits.

Governance Document Hierarchy

A governance document hierarchy defines how policies, standards, procedures, guidelines, control descriptions, and records relate by authority, precedence, scope, ownership, and exception.

Governance Operating Model

A governance operating model assigns accountable owners, duties, service levels, escalation, change control, emergency handling, and separation of duties across the IGA program.

Government Intelligence

Threat intelligence produced or shared by government bodies, such as national cybersecurity agencies, providing advisories, indicators, and threat assessments that a SOC can use, often authoritative but sometimes broad or delayed.

GraphQL Security Testing

Testing GraphQL APIs for security weaknesses during a penetration test, probing for issues like overly permissive queries, missing authorization, injection, and abuse of GraphQL features such as introspection and nested queries.

Group

A managed collection of identities or objects used to simplify assignment, policy, communication, or access, with membership lifecycle and ownership requiring governance.

Group Managed Service Accounts (gMSA)

A group managed service account is an Active Directory domain identity whose password and service-principal management are handled by Windows for compatible services on authorized member hosts.

Group Policy Hardening

Using Active Directory Group Policy to enforce secure configuration across many Windows systems at once, applying hardened settings, restrictions, and security baselines centrally rather than configuring each machine individually.

Groups

Collections of users (or other identities) managed together in identity systems, so access can be granted to a group once rather than to each member individually, simplifying access management and enabling role-based access.

GuardDuty Defender SCC

The native threat-detection services of the major clouds, AWS GuardDuty, Microsoft Defender for Cloud, and Google Security Command Center, which analyze cloud telemetry to detect threats and misconfigurations across an environment.

Guideline

A non-mandatory document offering recommended practices or advice on how to meet a policy or standard, providing helpful 'how-to' direction without the binding force of a policy or the strict requirements of a standard.

HIPAA

The US Health Insurance Portability and Accountability Act, which sets requirements for protecting the privacy and security of health information, obligating healthcare organizations and their partners to safeguard patient data.

HIPAA Breach Risk Support

HIPAA breach risk support provides technical evidence and limitations for the covered entity's assessment of PHI nature and extent, unauthorized person, actual acquisition or viewing, and mitigation.

HIPAA Cloud

Meeting HIPAA requirements when health information is processed or stored in the cloud, ensuring PHI is safeguarded through the shared-responsibility model, business-associate agreements, and appropriate cloud controls.

HIPAA Cloud Architecture

Designing a cloud architecture that meets HIPAA's safeguards for protected health information, with the segmentation, encryption, access control, and logging needed to handle PHI compliantly built into the design.

HIPAA Safeguard Categories

The administrative, physical, and technical safeguard categories in the HIPAA Security Rule, applied to electronic protected health information within the rule's scope.

HIPAA Security Rule

The part of HIPAA that sets required safeguards, administrative, physical, and technical, for protecting electronic protected health information, mapped to controls when implementing HIPAA in a framework context.