Glossary on Sinetris's viewpointshttps://sinetris.info/glossary/Recent content in Glossary on Sinetris's viewpointsSine Die theme for HugoDuilio Ruggieroduilio@sinetris.info© 2023 - 2026, Duilio Ruggiero2025-12-07T23:58:31ZRisk Owner2025-12-07T23:58:31+00:002025-12-07T23:58:31Zhttps://sinetris.info/glossary/risk-owner/#atomPerson directly responsible for identifying, assessing, monitoring, reporting,
responding to, and defining intervention strategies in relation to risks associated
with an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a>.Information Technology Asset2025-12-07T23:19:32+00:002025-12-07T23:19:32Zhttps://sinetris.info/glossary/information-technology-asset/#atomHardware and software (e.g., applications, systems, virtual resources, data) that
an organization uses to support its business objectives.Responsive Controls2025-12-07T21:35:56+00:002025-12-07T21:35:56Zhttps://sinetris.info/glossary/responsive-controls/#atomMeasures designed to respond to and rectify security violations or incidents after they have been identified.Detective Controls2025-12-07T21:23:57+00:002025-12-07T21:23:57Zhttps://sinetris.info/glossary/detective-controls/#atomMeasures designed to identify, record, and report a security incident after it has occurred.General Data Protection Regulation2025-12-07T21:22:17+00:002025-12-07T21:22:17Zhttps://sinetris.info/glossary/general-data-protection-regulation/#atomRegulation that governs how the personal data of individuals in the EU may be processed and transferred.Entitlements2025-12-01T11:17:25+00:002025-12-01T11:17:25Zhttps://sinetris.info/glossary/entitlements/#atomThe access rights an account has on an asset.Access Recertification Campaigns2025-12-01T10:25:02+00:002025-12-01T10:25:02Zhttps://sinetris.info/glossary/access-recertification-campaigns/#atomPeriodic review of user <a class="glossary-term" href="/glossary/entitlements/">entitlements</a>
to enforce the <a class="glossary-term" href="/glossary/principle-of-least-privilege/">Principle of Least Privilege</a>,
ensure <a class="glossary-term" href="/glossary/orphaned-account/">orphaned accounts</a> are removed,
and reduce internal threats and compliance violations.Access Request2025-12-01T10:22:15+00:002025-12-01T10:22:15Zhttps://sinetris.info/glossary/access-request/#atomA user-initiated process to gain permission to access an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a> within an organization’s infrastructure.Birthright Access2025-11-29T15:32:02+00:002025-11-29T15:32:02Zhttps://sinetris.info/glossary/birthright-access/#atom<a class="glossary-term" href="/glossary/entitlements/">Entitlements</a> automatically granted to a user when
they join an organization or change roles within it.Orphaned Account2025-11-29T15:24:33+00:002025-11-29T15:24:33Zhttps://sinetris.info/glossary/orphaned-account/#atomAccount that retains access to an asset without an active owner.Data Breach2025-11-27T22:08:23+00:002025-11-27T22:08:23Zhttps://sinetris.info/glossary/data-breach/#atomIncident involving copying, transmitting, viewing, or processing sensitive,
protected, or confidential information by unauthorized individuals or for
unauthorized purposes.Data Anonymization2025-11-24T14:47:49+00:002025-11-24T14:47:49Zhttps://sinetris.info/glossary/data-anonymization/#atomThe process of removing Personally Identifiable Information from a dataset in an irreversible and permanent manner.
This can serve as a mechanism of privacy protection. In the context of data governance,
anonymized data is no longer considered Personally Identifiable Information
according to the current regulatory interpretation.Proactive Controls2025-11-24T12:56:03+00:002025-11-24T12:56:03Zhttps://sinetris.info/glossary/proactive-controls/#atom<p>Proactive Controls are a strategy designed to prevent attacks and identify vulnerabilities
before they are exploited, focusing on prediction and prevention rather than simply
reacting, anticipating potential problems or targets and taking action to prepare
in advance, rather than waiting for them to occur.</p>Preventative Controls2025-11-24T11:42:20+00:002025-11-24T11:42:20Zhttps://sinetris.info/glossary/preventative-controls/#atomDesigned to prevent an event or an unauthorized action from occurring.Security Controls2025-11-24T11:36:55+00:002025-11-24T11:36:55Zhttps://sinetris.info/glossary/security-controls/#atomSafeguards and countermeasures that help protect an organization’s assets, systems,
and data from potential risks and threats.Subject Matter Expert2025-11-24T07:28:53+00:002025-11-24T07:28:53Zhttps://sinetris.info/glossary/subject-matter-expert/#atomA professional with in-depth, specialized knowledge in a particular field, process,
or technology who acts as a trusted advisor, guiding teams, validating information,
and solving complex problems to ensure accuracy, efficiency, and successful project
outcomes.Asset Administrator2025-11-24T01:27:13+00:002025-11-24T01:27:13Zhttps://sinetris.info/glossary/asset-administrator/#atomManages user roles, account assignments, and performs access reviews and audits
for an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a>.Brute-Force Attack2025-11-22T09:03:19+00:002025-11-22T09:03:19Zhttps://sinetris.info/glossary/brute-force-attack/#atomOften used to guess authentication credentials or discover hidden content/pages
within a web application using a trial-and-error method.Zero Trust2025-11-22T08:11:15+00:002025-11-22T08:11:15Zhttps://sinetris.info/glossary/zero-trust/#atomSecurity framework that requires all users, devices, and systems, whether inside
or outside the organization’s network, to be continuously authenticated, authorized,
and validated before gaining access to applications and data.Authentication Assurance Level2025-11-22T08:02:00+00:002025-11-22T08:02:00Zhttps://sinetris.info/glossary/authentication-assurance-level/#atomNIST standard to assess the degree of confidence and reliability of an authentication
process.Asset Owner2025-11-22T08:01:09+00:002025-11-22T08:01:09Zhttps://sinetris.info/glossary/asset-owner/#atomPerson or group responsible for an <a class="glossary-term" href="/glossary/information-technology-asset/">IT asset</a>.Account Lockout2025-11-22T08:00:36+00:002025-11-22T08:00:36Zhttps://sinetris.info/glossary/account-lockout/#atomA security feature typically used to prevent a <a class="glossary-term" href="/glossary/brute-force-attack/">Brute-Force Attack</a>
by temporarily disabling a user account after a set number of failed login attempts.Single Source of Truth2025-11-20T09:01:34+00:002025-11-20T09:01:34Zhttps://sinetris.info/glossary/single-source-of-truth/#atomPractice of centralizing all of an organization’s data related to a given subject
in a single, reliable location, ensuring that every person and every system operates
with the same up-to-date information.Web Authentication2025-11-10T15:34:37+00:002025-11-10T15:34:37Zhttps://sinetris.info/glossary/web-authentication/#atomSpecification that defines an API enabling the creation and use of strong, attested,
scoped, public key-based credentials by web applications, for the purpose of strongly
authenticating users.Client-to-Authenticator Protocols2025-11-10T15:29:40+00:002025-11-10T15:29:40Zhttps://sinetris.info/glossary/client-to-authenticator-protocols/#atomProtocol developed by the FIDO Alliance and complementary to the <a class="glossary-term" href="/glossary/web-authentication/">W3C's WebAuthn specification</a> that allows
a client (for example, an operating system, browser, or application) to communicate
with a device designed to authenticate the user.FIDO Specifications2025-11-10T15:10:26+00:002025-11-10T15:10:26Zhttps://sinetris.info/glossary/fido-specifications/#atomA set of open standards published by the
<a href="https://fidoalliance.org/" rel="external">FIDO Alliance</a>
for stronger, simpler, and phishing-resistant user authentication.Information Technology Asset Management2025-11-10T14:55:30+00:002025-11-10T14:55:30Zhttps://sinetris.info/glossary/information-technology-asset-management/#atomSystems to manage the lifecycle of <a class="glossary-term" href="/glossary/information-technology-asset/">IT assets</a>, including tracking, maintaining and disposing of hardware
and software.Anomaly Detection2025-11-10T14:26:54+00:002025-11-10T14:26:54Zhttps://sinetris.info/glossary/anomaly-detection/#atomA fundamental process in cybersecurity, used to identify events or patterns that
deviate from expected behavior within systems, networks, or datasets and that could
indicate a security threat, such as a network intrusion, malware, or unauthorized access.Drift2025-11-10T13:50:07+00:002025-11-10T13:50:07Zhttps://sinetris.info/glossary/drift/#atom<p>Drift is the difference between the <a class="glossary-term" href="/glossary/desired-state/">Desired State</a> of
a system and its <a class="glossary-term" href="/glossary/actual-state/">Actual State</a>.</p>
<p>Detecting and resolving this drift is essential to prevent security vulnerabilities,
compliance violations, and operational failures.</p>Actual State2025-11-10T13:47:54+00:002025-11-10T13:47:54Zhttps://sinetris.info/glossary/actual-state/#atomCurrent and factual condition of a system or its data as opposed to the
<a class="glossary-term" href="/glossary/desired-state/">Desired State</a>.Desired State2025-11-10T13:47:45+00:002025-11-10T13:47:45Zhttps://sinetris.info/glossary/desired-state/#atomThe planned state of a system, usually defined as data or code in a
<a class="glossary-term" href="/glossary/single-source-of-truth/"><abbr title="Single Source of Truth">SSOT</abbr></a>.Segregation of Duties2025-09-04T12:33:22+00:002025-09-04T12:33:22Zhttps://sinetris.info/glossary/segregation-of-duties/#atom<h2 id="description">Description</h2>
<p>Segregation of Duties (SoD) is a mechanism designed to prevent the risks of errors and fraudulent behavior by dividing the actions required to complete a task among different employees.</p>
<h3 id="examples">Examples</h3>
<ul>
<li>
<p>To prevent financial fraud: the person approving an invoice cannot be the same person who issued it.</p>
<blockquote>
<p><strong>Reason:</strong> they could potentially approve and pay fraudulent invoices to themselves or a fictitious supplier.</p>
</blockquote>
</li>
<li>
<p>To prevent both fraud and errors: the software engineer that approve code changes to critical assets cannot be the same person who submitted the changes.</p>
<blockquote>
<p><strong>Reason:</strong> they could miss mistakes made by them (prevent errors) or abuse the system to their own advantage (prevent fraud).</p>
</blockquote>
</li>
</ul>Non-Human Identity2025-07-26T10:27:48+00:002025-07-26T10:27:48Zhttps://sinetris.info/glossary/non-human-identity/#atomIdentity belonging to a machine, service account, containerized workload, or autonomous agent.Identity and Access Management2025-07-16T15:07:33+00:002025-07-16T15:07:33Zhttps://sinetris.info/glossary/identity-and-access-management/#atomIdentity and access management is a framework of policies, technologies, and
business processes aimed at facilitating the management of digital identities
and their access.Identity Threat Detection & Response2025-07-16T11:30:52+00:002025-07-16T11:30:52Zhttps://sinetris.info/glossary/identity-threat-detection-and-response/#atomCybersecurity discipline that includes tools and best practices for protecting
user identities and identity systems from cyber threats.SSL-Bridging2025-07-02T07:50:28+00:002025-07-02T07:50:28Zhttps://sinetris.info/glossary/ssl-bridging/#atomThe load balancer decrypts the incoming encrypted traffic (same as in
SSL-Termination) and re-encrypts it when sending to the destination (e.g.
backend instances).SSL-Passthrough2025-07-02T07:50:28+00:002025-07-02T07:50:28Zhttps://sinetris.info/glossary/ssl-passthrough/#atom<p>The load balancer passes the encrypted traffic to the destination (e.g. backend
instances) without decrypting it.</p>
<p>Because the load balancer only sees encrypted traffic, it is not possible to
perform layer 7 (OSI model) actions.</p>SSL-Termination2025-07-02T07:50:28+00:002025-07-02T07:50:28Zhttps://sinetris.info/glossary/ssl-termination/#atomThe load balancer decrypts the incoming encrypted traffic and sends it to the
destination (e.g. backend instances) unencrypted.Account Takeover2025-06-25T11:55:55+00:002025-06-25T11:55:55Zhttps://sinetris.info/glossary/account-take-overs/#atomGaining unauthorized access to a user account.Color Wheel2025-05-30T06:55:18+00:002025-05-30T06:55:18Zhttps://sinetris.info/glossary/color-wheel/#atomA circular diagram used to show the relationships between colors.Color Theory2025-05-27T15:46:33+00:002025-05-27T15:46:33Zhttps://sinetris.info/glossary/color-theory/#atomThe study of how colors interact with each other and how they can influence people’s emotions and perceptions.Color Harmonies2025-05-27T14:18:00+00:002025-05-27T14:18:00Zhttps://sinetris.info/glossary/color-harmonies/#atom<h2 id="definition">Definition</h2>
<p>The term “color harmonies” refers to the creation of balanced and aesthetically
pleasing color combinations based on the principles and concepts outlined in
<a class="glossary-term" href="/glossary/color-theory/">Color Theory</a>.</p>
<h2 id="color-combinations">Color combinations</h2>
<h3 id="analogous">Analogous</h3>
<h3 id="complementary">Complementary</h3>
<h3 id="split-complementary">Split-Complementary</h3>
<h3 id="triadic">Triadic</h3>
<p>The triadic color harmony uses three colors equally spaced on the color wheel,
forming a triangle, to create vibrant, balanced, and visually appealing color
palette.</p>Information Assurance2025-03-17T10:43:09+00:002025-03-17T10:43:09Zhttps://sinetris.info/glossary/information-assurance/#atom<p>Information Assurance (IA) is the practice of assuring information quality and managing risks related to the use, processing, storage, and transmission of information.</p>
<p>The 5 pillars of information assurance includes protection of the <strong>Confidentiality</strong>, <strong>Integrity</strong>, <strong>Availability</strong>, <strong>Authenticity</strong>, and <strong>Non-repudiation</strong> of information.</p>
<p>In IT systems, when possible, assets should be tagged/labeled with proper Information Assurance level.</p>
<h2 id="confidentiality">Confidentiality</h2>
<p>The property that information is not made available or disclosed to unauthorized individuals, entities, or processes.</p>Information and Communication Technology2023-08-06T10:15:25+00:002023-08-06T10:15:25Zhttps://sinetris.info/glossary/information-and-communication-technology/#atom<p>An umbrella term that encompasses all technical means used to handle information
and facilitate communication through the use of computing devices (e.g., desktops,
laptops, servers, mainframes, smartphones, tablet, or any other CPU-equipped device),
network equipment (e.g., routers, switches, modems, cables), other peripherals (e.g.,
printers, scanners, external hard drives), and any related software.</p>Out of the box2023-08-06T10:15:25+00:002023-08-06T10:15:25Zhttps://sinetris.info/glossary/out-of-the-box/#atomNative or built-in feature or functionality of a product, included by default
and that works immediately after first setup.Best Effort2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/best-effort/#atomReasonable effort to satisfy a request but without guaranteeing success.Information Technology2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/information-technology/#atom<p>The study or use of hardware and software to manage, store, retrieve, and deliver
data.</p>
<p>A subset of <a class="glossary-term" href="/glossary/information-and-communication-technology/"><abbr title="Single Source of Truth">ICT</abbr></a>.</p>Principle of Least Privilege2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/principle-of-least-privilege/#atomSecurity concept whereby a user or service is granted the minimum levels of access
and authorization necessary to perform the requested task.Real Time2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/real-time/#atom<p>Reported at the same time something takes place or delivered in a short time.</p>
<p>What we consider real-time is a matter of expectations, for example a postal package
delivered in few minutes would still be considered as delivered in real-time.</p>Real-Time Computing2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/real-time-computing/#atom<h2 id="description">Description</h2>
<p>Real-time computing, also known as reactive computing, is used to describe a computer system that guarantees the processing of inputs and the execution of tasks within specified time limits, often referred to as “deadlines”.</p>
<p>We can divide real-time systems into three categories based on expectations:</p>
<ul>
<li>
<a href="/glossary/real-time-computing/">soft real-time</a></li>
<li>
<a href="/glossary/real-time-computing/">firm real-time</a></li>
<li>
<a href="/glossary/real-time-computing/">hard real-time</a></li>
</ul>
<h2 id="soft-real-time">soft real-time</h2>
<p>The system continues to operate even if it’s unable to perform operations within the allotted time.</p>
<h2 id="firm-real-time">firm real-time</h2>
<p>Deadlines are crucial, but occasional non-compliance is tolerable.</p>Real-Time Operating System2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/real-time-os/#atomRecovery Point Objective2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/recovery-point-objective/#atomTargeted duration of time between the event of failure and the point where operations resume.Recovery Time Objective2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/recovery-time-objective/#atomAgreed maximum time, based on risk analysis, between the failure event and the restoration of operations.Software Bill of Materials2023-08-06T10:10:15+00:002023-08-06T10:10:15Zhttps://sinetris.info/glossary/software-bill-of-materials/#atom<p>A Software Bill of Materials (SBOM) is a comprehensive inventory of all the components,
including dependencies and related installed tools, used in a software.</p>