GRC

Periodic review of user entitlements to enforce the Principle of Least Privilege, ensure orphaned accounts are removed, and reduce internal threats and compliance violations.

Manages user roles, account assignments, and performs access reviews and audits for an IT asset.

Person or group responsible for an IT asset.

NIST standard to assess the degree of confidence and reliability of an authentication process.

Entitlements automatically granted to a user when they join an organization or change roles within it.

The practice of assuring information quality and managing risks related to the use, processing, storage, and transmission of information.

Hardware and software (e.g., applications, systems, virtual resources, data) that an organization uses to support its business objectives.

Systems to manage the lifecycle of IT assets, including tracking, maintaining and disposing of hardware and software.

Targeted duration of time between the event of failure and the point where operations resume.

Agreed maximum time, based on risk analysis, between the failure event and the restoration of operations.

Person directly responsible for identifying, assessing, monitoring, reporting, responding to, and defining intervention strategies in relation to risks associated with an IT asset.

Mechanism designed to prevent errors and fraud by dividing the actions required to complete a task among different employees.

A comprehensive inventory of all the components used in a software.

A professional with in-depth, specialized knowledge in a particular field, process, or technology who acts as a trusted advisor, guiding teams, validating information, and solving complex problems to ensure accuracy, efficiency, and successful project outcomes.