IT glossary

Showing 66 of 66 terms.

ABACAttribute Based Access ControlIdentity

An authorization model that evaluates attributes of the subject, resource, action and environment at request time.Read the topicSee also: RBAC

ACLAccess Control ListNetworking

An ordered list of permit or deny rules applied to network traffic or to an object such as a file or directory entry.Read the topicSee also: Firewall, RBAC

ADActive DirectoryIdentity

Microsoft's on premises directory service providing authentication, authorisation, policy and object management for Windows environments.Read the topicSee also: LDAP, Kerberos, GPO

APIApplication Programming InterfaceApplications

A defined interface allowing software to exchange data or invoke functionality across a boundary.Read the topicSee also: REST, OAuth 2.0

ARPAddress Resolution ProtocolNetworking

Maps IPv4 addresses to MAC addresses within a local broadcast domain. Unauthenticated by design.Read the topicSee also: MAC Address, DAI

BGPBorder Gateway ProtocolNetworking

The path vector routing protocol that exchanges reachability information between autonomous systems.Read the topicSee also: Routing, RPKI

BYODBring Your Own DeviceEndpoints

Allowing personally owned devices to access corporate resources, usually with application level rather than device level management.Read the topicSee also: MAM, MDM

CASBCloud Access Security BrokerSecurity

A control point that discovers and governs SaaS usage, applying policy to cloud application access and data.Read the topicSee also: SaaS, DLP

CDNContent Delivery NetworkNetworking

Distributed edge infrastructure that caches and serves content close to users and absorbs volumetric attacks.Read the topicSee also: Reverse Proxy, DDoS

CIDRClassless Inter Domain RoutingNetworking

Notation and addressing scheme that expresses a network by prefix length, such as 10.0.0.0/8.Read the topicSee also: Subnet, VLSM

CMDBConfiguration Management DatabaseOperations

A record of configuration items and the relationships between them, used to understand service dependencies.Read the topicSee also: ITAM, ITSM

Conditional AccessIdentity

Policy that evaluates signals about user, device, application, location and risk before granting, blocking or constraining access.Read the topicSee also: Zero Trust, MFA

DHCPDynamic Host Configuration ProtocolNetworking

Automatically assigns IP addresses and network configuration options to clients.Read the topicSee also: DNS, Scope

DLPData Loss PreventionSecurity

Controls that detect and restrict movement of sensitive data based on classification and policy.Read the topicSee also: Sensitivity Label, CASB

DMARCDomain based Message Authentication, Reporting and ConformanceSecurity

A DNS policy telling receivers how to handle mail failing SPF and DKIM alignment, with reporting.Read the topicSee also: SPF, DKIM

DNSDomain Name SystemNetworking

The hierarchical, distributed directory that resolves names to addresses and service records.Read the topicSee also: DNSSEC, SRV

DNSSECDNS Security ExtensionsNetworking

Cryptographic signing of DNS data allowing resolvers to validate that answers are authentic and unaltered.Read the topicSee also: DNS

EDREndpoint Detection and ResponseSecurity

Endpoint software that records behavioural telemetry, detects malicious activity and enables remote containment.Read the topicSee also: XDR, SIEM

EPSSExploit Prediction Scoring SystemSecurity

A model estimating the probability that a vulnerability will be exploited in the wild, used to prioritise remediation.Read the topicSee also: CVSS, KEV

FIDO2Identity

An authentication standard using origin bound public key credentials in a security key or platform authenticator, resistant to phishing.Read the topicSee also: WebAuthn, Passkey

GPOGroup Policy ObjectEndpoints

An Active Directory object delivering configuration settings to users and computers within a scope.Read the topicSee also: Active Directory, Windows

HSTSHTTP Strict Transport SecuritySecurity

A response header instructing browsers to use HTTPS only for a domain for a defined period.Read the topicSee also: TLS, HTTPS

IaaSInfrastructure as a ServiceCloud

Cloud delivery of virtualised compute, storage and networking, with the customer managing the operating system upward.Read the topicSee also: PaaS, SaaS

IaCInfrastructure as CodeOperations

Declaring infrastructure in version controlled files so environments are reproducible and changes reviewable.Read the topicSee also: Terraform, Drift

IAMIdentity and Access ManagementIdentity

The discipline and systems that manage identities, credentials, entitlements and access decisions.Read the topicSee also: IdP, RBAC

IdPIdentity ProviderIdentity

A service that authenticates users and issues assertions or tokens that applications trust.Read the topicSee also: SAML, OIDC

ITAMIT Asset ManagementOperations

Tracking hardware, software, licences and cloud resources through their lifecycle, including ownership and cost.Read the topicSee also: CMDB

ITSMIT Service ManagementOperations

The practices used to deliver, support and improve IT services, including incident, change and problem management.Read the topicSee also: ITIL, SLA

JITJust in Time AccessIdentity

Granting privileged access only for a bounded time window, with approval, then revoking it automatically.Read the topicSee also: PAM, PIM

KerberosIdentity

A ticket based authentication protocol used by Active Directory, avoiding transmission of passwords over the network.Read the topicSee also: TGT, SPN

KEVKnown Exploited VulnerabilitiesSecurity

CISA's catalogue of vulnerabilities confirmed to be exploited in the wild, used to prioritise urgent patching.Read the topicSee also: EPSS, CVE

LANLocal Area NetworkNetworking

A network confined to a site or building, typically switched Ethernet and wireless.Read the topicSee also: VLAN, WAN

LDAPLightweight Directory Access ProtocolIdentity

The protocol used to query and modify directory services over TCP/389 or TCP/636.Read the topicSee also: Active Directory

MAMMobile Application ManagementEndpoints

Protecting corporate data inside managed applications without managing the whole device.Read the topicSee also: MDM, BYOD

MDMMobile Device ManagementEndpoints

Enrolling and managing device configuration, compliance and applications through a management service.Read the topicSee also: Intune, MAM

MFAMulti Factor AuthenticationIdentity

Requiring two or more independent authentication factors before granting access.Read the topicSee also: FIDO2, TOTP

MTUMaximum Transmission UnitNetworking

The largest packet size a link will carry; mismatches cause hangs on large transfers while pings succeed.Read the topicSee also: TCP/IP, VPN

NACNetwork Access ControlNetworking

Authenticating and authorising devices before allowing network access, typically using 802.1X.Read the topicSee also: 802.1X, RADIUS

NATNetwork Address TranslationNetworking

Rewriting addresses and ports in transit, commonly to share public addresses among private hosts.Read the topicSee also: PAT, Firewall

OIDCOpenID ConnectIdentity

An authentication layer over OAuth 2.0 that issues signed ID tokens describing the authenticated user.Read the topicSee also: OAuth 2.0, JWT

OSI ModelNetworking

A seven layer conceptual model separating network communication into distinct functional layers.Read the topicSee also: TCP/IP

PaaSPlatform as a ServiceCloud

Cloud services providing a managed runtime and platform, with the customer responsible for code, data and access.Read the topicSee also: IaaS, Serverless

PAMPrivileged Access ManagementIdentity

Controlling, brokering, recording and time limiting administrative access to sensitive systems.Read the topicSee also: JIT, PAW

PAWPrivileged Access WorkstationIdentity

A hardened, restricted device used exclusively for administrative work.Read the topicSee also: PAM, Tier 0

PIMPrivileged Identity ManagementIdentity

Microsoft's service for eligible, time bound, approval based activation of privileged roles.Read the topicSee also: JIT, Entra ID

PKIPublic Key InfrastructureSecurity

The hierarchy of certificate authorities, policies and processes that issue and validate digital certificates.Read the topicSee also: TLS, Certificate

RBACRole Based Access ControlIdentity

Assigning permissions to roles and roles to identities, rather than granting permissions directly.Read the topicSee also: ABAC, Least Privilege

RPORecovery Point ObjectiveInfrastructure

The maximum acceptable amount of data loss, expressed as a time window before an incident.Read the topicSee also: RTO, Backup

RTORecovery Time ObjectiveInfrastructure

The maximum acceptable time to restore a service after a disruption.Read the topicSee also: RPO, DR

SaaSSoftware as a ServiceCloud

Applications operated entirely by a provider and consumed over the internet.Read the topicSee also: IaaS, PaaS

SAMLSecurity Assertion Markup LanguageIdentity

An XML based standard for exchanging authentication and attribute assertions between identity and service providers.Read the topicSee also: SSO, OIDC

SASESecure Access Service EdgeNetworking

A converged model delivering SD WAN networking and cloud based security services from one platform.Read the topicSee also: SD-WAN, ZTNA

SIEMSecurity Information and Event ManagementSecurity

A platform that centralises telemetry, applies detection logic and supports investigation and reporting.Read the topicSee also: SOAR, EDR

SOARSecurity Orchestration, Automation and ResponseSecurity

Automating enrichment, decision and response actions across security and IT tooling via playbooks.Read the topicSee also: SIEM, Playbook

SPFSender Policy FrameworkSecurity

A DNS record listing the hosts authorised to send mail for a domain.Read the topicSee also: DKIM, DMARC

SSOSingle Sign OnIdentity

One authentication event granting access to many applications through issued tokens or assertions.Read the topicSee also: SAML, OIDC

TCPTransmission Control ProtocolNetworking

A connection oriented transport protocol providing reliable, ordered delivery with congestion control.Read the topicSee also: UDP, IP

Tier 0Security

The set of systems that control identity and infrastructure, domain controllers, identity providers, PKI, virtualization managers, backup and security tooling.Read the topicSee also: PAM, PAW

TLSTransport Layer SecuritySecurity

The protocol providing confidentiality, integrity and server authentication for application traffic.Read the topicSee also: HTTPS, Certificate

UDPUser Datagram ProtocolNetworking

A connectionless transport protocol with no ordering or retransmission, used by DNS, DHCP, NTP and real time media.Read the topicSee also: TCP

VLANVirtual LANNetworking

A logically separated layer 2 broadcast domain within shared physical switching infrastructure.Read the topicSee also: 802.1Q, Trunk

VPNVirtual Private NetworkNetworking

An authenticated, encrypted tunnel carrying private traffic across an untrusted network.Read the topicSee also: IPsec, ZTNA

WANWide Area NetworkNetworking

A network connecting geographically separated sites, using provider circuits or internet based overlays.Read the topicSee also: SD-WAN, LAN

XDRExtended Detection and ResponseSecurity

Correlated detection and response across endpoint, identity, email, cloud and network telemetry.Read the topicSee also: EDR, SIEM

Zero TrustSecurity

A security model that removes implicit trust based on network location and verifies every request explicitly.Read the topicSee also: ZTNA, Conditional Access

ZTNAZero Trust Network AccessSecurity

Brokered, per application access granted after verifying identity and device, instead of placing a client on the network.Read the topicSee also: Zero Trust, VPN