Terminology Index

Glossary

2953 terms

Security Investment Decision

A security investment decision compares expected risk reduction, obligations, enablement, resilience, total cost, staffing, integration, data exposure, lock-in, alternatives, and uncertainty.

Security Log Access Control

Least-privilege governance over viewing, querying, exporting, administering, retaining, and deleting security telemetry.

Security Operations Center

The team and function responsible for monitoring, detecting, and responding to security threats, the operational heart of blue-team work, run continuously to defend the organization.

The SOC is the operational center for ongoing defense: analysts watching telemetry, triaging alerts, investigating events, and responding to incidents, supported by engineering, intelligence, and management. SOCs vary from small in-house teams to large 24/7 operations and hybrid models with MDR partners. As a defining blue-team-operations concept, the SOC is where strategy, tools, and people meet to do the actual work of defending the organization day after day.

Introduced in: Blue Team Operations

Examples

A 24/7 SOC monitoring telemetry and triaging alerts continuously.
Hybrid SOC arrangements combining in-house staff with MDR.
The SOC running detection, investigation, and response operations.

SOCrelates_to Hybrid SOCrelates_to Follow-the-Sunrelates_to Security Engineeringrelates_to Security Analyst Rolerelates_to Blue Teamrelates_to Follow-the-Sunrelates_to Hybrid SOCrelates_to MDRrelates_to MSSPsrelates_to SOCrelates_to Detection Engineerrelates_to

Security Posture

The overall state of an organization's security at a point in time, controls in place, exposures, maturity, performance, that summarizes how well-defended it is and where it needs to improve.

Security Procedure

A security procedure gives ordered instructions, prerequisites, roles, tools, decisions, validation, rollback, evidence, and escalation for performing a controlled task.

Security Program Charter

A foundational document establishing a security program's authority, scope, mission, and structure, signed by executive leadership, that authorizes the program and anchors its governance.

Security Program Metrics

Measures that gauge how well a security program is performing, control coverage, risk reduction, operational performance, used to demonstrate value and steer improvement at program scale.

Security Program Presentation

Communicating the security program's status, priorities, and asks to executive and board audiences clearly, persuasively, and concisely, a capstone skill that determines whether the program gets support.

Security Program Scope

What the security program covers, business units, systems, geographies, controls, that defines the program's responsibilities and boundaries so they are clear rather than assumed.

Security Questionnaire Response

Responding to customer or partner security questionnaires accurately and efficiently, a routine but high-volume task in compliance programs that often gates deals and partnerships.

Security Report Writing

The skill of writing clear, accurate, useful security reports, investigation findings, briefings, executive summaries, that turn analyst work into communication stakeholders can act on.

Security Review

A structured examination of a system, process, or change to find security issues before they cause harm, lighter than a full audit and more focused than a passing glance, foundational to embedding security in operations.

Security Roadmap

A time-phased plan of security improvements, what gets done when, that turns strategy into a sequenced set of initiatives with owners, dependencies, and milestones over months and years.

Security Signal Triage

Security signal triage validates a detection, identifies the affected asset and identities, establishes scope, and records an evidence-based disposition.

Security Standard

A security standard translates policy into mandatory, testable requirements with defined scope, owner, measurement, effective date, evidence, and exception handling.

Security Steering Committee

A cross-functional body that oversees security at the executive or senior-management level, setting priorities, sponsoring initiatives, and reviewing performance, providing governance and accountability.

Security Strategy

The plan for how security will support business objectives over a multi-year horizon, priorities, capabilities, and outcomes, that gives the program direction and informs investment.

Security Telemetry Requirement

A testable statement of the security question telemetry must answer and the sources, fields, population, timing, and limitations needed to answer it.

Security Test Derivation

Security test derivation converts threat and mitigation claims into verifiable subjects, objects, states, preconditions, actions, expected outcomes, authoritative evidence, environments, and cleanup.

Security Testing

Testing systems for security weaknesses, ranging from automated scanning to manual penetration testing, to find issues before attackers do. A foundational defensive-web fundamentals practice.

Security Tool Data Governance

Security tool data governance controls what a protection service reads, copies, stores, derives, exports, retains, deletes, and exposes to vendors or operators.

Security Training Effectiveness

How well security training actually changes behavior, beyond completion rates, measured through behavior change, simulation results, and reporting rates, the test of whether training delivered value.

Security Training Program

A managed program that designs, delivers, and measures the security training employees receive, across the awareness and GRC capstone perspectives, so training is intentional rather than ad hoc.

Security and Privacy Objectives

Security and privacy objectives state the desired properties and unacceptable outcomes for assets, people, business processes, and system behavior.

Security as Code

Expressing security configuration, policies, and controls as code that is versioned, tested, and deployed alongside applications, so security is automated and consistent rather than manually managed.

Security from Observability

Using cloud-native observability data (traces, metrics, logs) for security purposes, detection, investigation, and policy, so the same telemetry that powers operations also strengthens defense.

Security in Business Processes

Integration of security decisions and controls into the workflows where work occurs, such as payment changes, onboarding, procurement, release, and incident reporting.

Segregation of Duties Modeling

Modeling segregation-of-duties (SoD) constraints in IGA, identifying which combinations of access shouldn't be held by the same person, so the access model enforces SoD rather than relying on after-the-fact review.

Self-Assessment

An internal evaluation of controls or compliance against criteria, performed by the organization itself, used for ongoing assurance, audit preparation, and as a recognized validation method in some compliance regimes.

Self-Service Security

Enabling developers and engineers to handle their own security tasks safely, requesting access, fixing findings, deploying secured workloads, through guardrails and automation, scaling security beyond the central team.

Sensitive Action Reauthentication

Sensitive action reauthentication requires recent suitable account evidence before a high-impact change or transaction and binds confirmation to the intended operation.

Sensitive Data Access Assessment

Sensitive data access assessment connects incident identities and sessions to application, database, API, file, export, report, storage, and network evidence for protected records.