Information Security on Sinetris's viewpointshttps://sinetris.info/glossary-contexts/information-security/Recent content in Information Security on Sinetris's viewpointsSine Die theme for HugoDuilio Ruggieroduilio@sinetris.info&copy; 2023 - 2026, Duilio Ruggiero2025-12-07T23:58:31ZRisk Owner2025-12-07T23:58:31+00:002025-12-07T23:58:31Zhttps://sinetris.info/glossary/risk-owner/#atomPerson directly responsible for identifying, assessing, monitoring, reporting, responding to, and defining intervention strategies in relation to risks associated with an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a>.Information Technology Asset2025-12-07T23:19:32+00:002025-12-07T23:19:32Zhttps://sinetris.info/glossary/information-technology-asset/#atomHardware and software (e.g., applications, systems, virtual resources, data) that an organization uses to support its business objectives.Responsive Controls2025-12-07T21:35:56+00:002025-12-07T21:35:56Zhttps://sinetris.info/glossary/responsive-controls/#atomMeasures designed to respond to and rectify security violations or incidents after they have been identified.Detective Controls2025-12-07T21:23:57+00:002025-12-07T21:23:57Zhttps://sinetris.info/glossary/detective-controls/#atomMeasures designed to identify, record, and report a security incident after it has occurred.Entitlements2025-12-01T11:17:25+00:002025-12-01T11:17:25Zhttps://sinetris.info/glossary/entitlements/#atomThe access rights an account has on an asset.Access Recertification Campaigns2025-12-01T10:25:02+00:002025-12-01T10:25:02Zhttps://sinetris.info/glossary/access-recertification-campaigns/#atomPeriodic review of user <a class="glossary-term" href="/glossary/entitlements/">entitlements</a> to enforce the <a class="glossary-term" href="/glossary/principle-of-least-privilege/">Principle of Least Privilege</a>, ensure <a class="glossary-term" href="/glossary/orphaned-account/">orphaned accounts</a> are removed, and reduce internal threats and compliance violations.Access Request2025-12-01T10:22:15+00:002025-12-01T10:22:15Zhttps://sinetris.info/glossary/access-request/#atomA user-initiated process to gain permission to access an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a> within an organization&rsquo;s infrastructure.Birthright Access2025-11-29T15:32:02+00:002025-11-29T15:32:02Zhttps://sinetris.info/glossary/birthright-access/#atom<a class="glossary-term" href="/glossary/entitlements/">Entitlements</a> automatically granted to a user when they join an organization or change roles within it.Orphaned Account2025-11-29T15:24:33+00:002025-11-29T15:24:33Zhttps://sinetris.info/glossary/orphaned-account/#atomAccount that retains access to an asset without an active owner.Data Breach2025-11-27T22:08:23+00:002025-11-27T22:08:23Zhttps://sinetris.info/glossary/data-breach/#atomIncident involving copying, transmitting, viewing, or processing sensitive, protected, or confidential information by unauthorized individuals or for unauthorized purposes.Data Anonymization2025-11-24T14:47:49+00:002025-11-24T14:47:49Zhttps://sinetris.info/glossary/data-anonymization/#atomThe process of removing Personally Identifiable Information from a dataset in an irreversible and permanent manner. This can serve as a mechanism of privacy protection. In the context of data governance, anonymized data is no longer considered Personally Identifiable Information according to the current regulatory interpretation.Proactive Controls2025-11-24T12:56:03+00:002025-11-24T12:56:03Zhttps://sinetris.info/glossary/proactive-controls/#atom<p>Proactive Controls are a strategy designed to prevent attacks and identify vulnerabilities before they are exploited, focusing on prediction and prevention rather than simply reacting, anticipating potential problems or targets and taking action to prepare in advance, rather than waiting for them to occur.</p>Preventative Controls2025-11-24T11:42:20+00:002025-11-24T11:42:20Zhttps://sinetris.info/glossary/preventative-controls/#atomDesigned to prevent an event or an unauthorized action from occurring.Security Controls2025-11-24T11:36:55+00:002025-11-24T11:36:55Zhttps://sinetris.info/glossary/security-controls/#atomSafeguards and countermeasures that help protect an organization&rsquo;s assets, systems, and data from potential risks and threats.Subject Matter Expert2025-11-24T07:28:53+00:002025-11-24T07:28:53Zhttps://sinetris.info/glossary/subject-matter-expert/#atomA professional with in-depth, specialized knowledge in a particular field, process, or technology who acts as a trusted advisor, guiding teams, validating information, and solving complex problems to ensure accuracy, efficiency, and successful project outcomes.Asset Administrator2025-11-24T01:27:13+00:002025-11-24T01:27:13Zhttps://sinetris.info/glossary/asset-administrator/#atomManages user roles, account assignments, and performs access reviews and audits for an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a>.Authentication Assurance Level2025-11-22T08:02:00+00:002025-11-22T08:02:00Zhttps://sinetris.info/glossary/authentication-assurance-level/#atomNIST standard to assess the degree of confidence and reliability of an authentication process.Asset Owner2025-11-22T08:01:09+00:002025-11-22T08:01:09Zhttps://sinetris.info/glossary/asset-owner/#atomPerson or group responsible for an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a>.Account Lockout2025-11-22T08:00:36+00:002025-11-22T08:00:36Zhttps://sinetris.info/glossary/account-lockout/#atomA security feature typically used to prevent a <a class="glossary-term" href="/glossary/brute-force-attack/">Brute-Force Attack</a> by temporarily disabling a user account after a set number of failed login attempts.Web Authentication2025-11-10T15:34:37+00:002025-11-10T15:34:37Zhttps://sinetris.info/glossary/web-authentication/#atomSpecification that defines an API enabling the creation and use of strong, attested, scoped, public key-based credentials by web applications, for the purpose of strongly authenticating users.Client-to-Authenticator Protocols2025-11-10T15:29:40+00:002025-11-10T15:29:40Zhttps://sinetris.info/glossary/client-to-authenticator-protocols/#atomProtocol developed by the FIDO Alliance and complementary to the <a class="glossary-term" href="/glossary/web-authentication/">W3C&#39;s WebAuthn specification</a> that allows a client (for example, an operating system, browser, or application) to communicate with a device designed to authenticate the user.FIDO Specifications2025-11-10T15:10:26+00:002025-11-10T15:10:26Zhttps://sinetris.info/glossary/fido-specifications/#atomA set of open standards published by the <a href="https://fidoalliance.org/" rel="external">FIDO Alliance</a> for stronger, simpler, and phishing-resistant user authentication.Information Technology Asset Management2025-11-10T14:55:30+00:002025-11-10T14:55:30Zhttps://sinetris.info/glossary/information-technology-asset-management/#atomSystems to manage the lifecycle of <a class="glossary-term" href="/glossary/information-technology-asset/">IT assets</a>, including tracking, maintaining and disposing of hardware and software.Desired State2025-11-10T13:47:45+00:002025-11-10T13:47:45Zhttps://sinetris.info/glossary/desired-state/#atomThe planned state of a system, usually defined as data or code in a <a class="glossary-term" href="/glossary/single-source-of-truth/"><abbr title="Single Source of Truth">SSOT</abbr></a>.Account Takeover2025-06-25T11:55:55+00:002025-06-25T11:55:55Zhttps://sinetris.info/glossary/account-take-overs/#atomGaining unauthorized access to a user account.Information Assurance2025-03-17T10:43:09+00:002025-03-17T10:43:09Zhttps://sinetris.info/glossary/information-assurance/#atom<p>Information Assurance (IA) is the practice of assuring information quality and managing risks related to the use, processing, storage, and transmission of information.</p> <p>The 5 pillars of information assurance includes protection of the <strong>Confidentiality</strong>, <strong>Integrity</strong>, <strong>Availability</strong>, <strong>Authenticity</strong>, and <strong>Non-repudiation</strong> of information.</p> <p>In IT systems, when possible, assets should be tagged/labeled with proper Information Assurance level.</p> <h2 id="confidentiality">Confidentiality</h2> <p>The property that information is not made available or disclosed to unauthorized individuals, entities, or processes.</p>Principle of Least Privilege2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/principle-of-least-privilege/#atomSecurity concept whereby a user or service is granted the minimum levels of access and authorization necessary to perform the requested task.