Acronym study
Terms 91–120 of 754 ISC2 CC acronyms and key terms. Each entry includes a plain-English definition and a link to the full 800-word glossary page with exam context and practice questions.
Term 91
Broken access control is a security vulnerability that occurs when an application does not properly enforce restrictions on what authenticated users are allowed to do, allowing them to access unauthorized data or perform unauthorized actions.
Term 92
Budgets in cloud computing are monitoring tools that allow you to set spending limits and receive alerts when your costs approach or exceed those limits.
Term 93
Business continuity is the capability of an organization to continue delivering essential services during and after a disruptive event.
Term 94
A Business continuity plan (BCP) is a documented strategy that outlines how an organization will continue critical operations during and after a disruptive event.
Term 95
Business Continuity Planning is the process of creating a strategy to keep an organization's essential functions running during and after a major disruption.
Term 96
A systematic process used to identify and evaluate the potential effects of an interruption to critical business operations as a result of a disaster, accident, or emergency.
Term 97
BYOD (Bring Your Own Device) is a policy allowing employees to use their personal devices for work tasks, increasing flexibility but introducing security and management challenges.
Term 98
A captive portal is a web page that you must see and interact with before you are allowed full access to a public or guest Wi-Fi network.
Term 99
CDP is a Cisco proprietary protocol used by network devices to share information about themselves with directly connected neighbors, helping network administrators discover and understand the topology.
Term 100
Certificate pinning is a security technique that associates a specific digital certificate or public key with a particular server, so that an app or system will only trust that exact certificate, rejecting any others even if they are issued by a trusted certificate authority.
Term 101
Chain of custody is a documented process that tracks the handling, transfer, and possession of evidence or digital assets from the moment they are collected until they are presented in court or used in an investigation.
Term 102
Change management is the structured process of planning, approving, implementing, and reviewing changes to IT systems to minimize risk and disruption.
Term 103
The CIA triad is a foundational security model that guides organizations in protecting data through confidentiality, integrity, and availability.
Term 104
A security model that enforces data integrity by ensuring that only authorized, well-formed transactions change data, and that those changes are logged and controlled.
Term 105
Cloud Armor is a Google Cloud web application firewall (WAF) service that protects applications and websites from attacks like DDoS and SQL injection using customizable security rules.
Term 106
Cloud Audit Logs are a record of actions taken by users, services, and resources inside a cloud environment, capturing who did what, when, and from where.
Term 107
Cloud DLP (Data Loss Prevention) is a set of tools and policies that protect sensitive data stored, processed, or shared in cloud services from unauthorized access, leaks, or breaches.
Term 108
Cloud IAM (Identity and Access Management) is a framework of policies and technologies that ensures the right individuals have appropriate access to cloud resources at the right time and for the right reasons.
Term 109
Cloud KMS (Key Management Service) is a cloud-based service that lets you create, manage, and use encryption keys to protect your data at rest and in transit.
Term 110
Cloud logging is the practice of collecting, storing, and analyzing log data generated by cloud-based resources and applications to monitor performance, troubleshoot issues, and maintain security.
Term 111
Cloud monitoring is the process of observing, measuring, and managing an organization's cloud infrastructure and applications to ensure performance, availability, and security.
Term 112
Cloud security architecture is the design and organization of security controls, policies, and technologies used to protect data, applications, and infrastructure in a cloud computing environment.
Term 113
Cloud security posture management is the continuous process of monitoring cloud environments to detect misconfigurations, compliance violations, and security risks, and automatically remediating them to maintain a strong security posture.
Term 114
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds.
Term 115
AWS CloudTrail is a service that records every action taken in your AWS account, creating a detailed log of who did what and when for security and auditing purposes.
Term 116
CloudWatch is an AWS monitoring service that tracks metrics, logs, and alarms for your cloud resources so you can see what’s happening and respond to issues.
Term 117
Clustering is a technique where multiple servers work together as a single system to keep applications running even if one server fails.
Term 118
Control Objectives for Information and Related Technologies — an IT governance framework for managing and auditing IT processes.
Term 119
A set of principles and rules that guide IT professionals to act with integrity, honesty, and responsibility in their work.
Term 120
CodeQL is a semantic code analysis engine used by developers to find security vulnerabilities in source code by treating code as data and querying it for potential flaws.