Glossary

CISA and CISM glossary: key audit, risk and security terms with plain-English definitions, real-world examples and how each is tested.

• Shared responsibility model — CISA & CISM
• Defense in depth — CISA & CISM
• Zero trust — CISA & CISM
• Multi-factor authentication (MFA) — CISA & CISM
• False acceptance rate — CISA
• Crossover error rate — CISA
• Symmetric encryption — CISA & CISM
• Asymmetric encryption — CISA & CISM
• Digital signature — CISA & CISM
• Hash function — CISA & CISM
• Certificate revocation list (CRL) — CISA
• Data loss prevention (DLP) — CISA & CISM
• Security information and event management (SIEM) — CISA & CISM
• Chain of custody — CISA & CISM
• Order of volatility — CISA & CISM
• Penetration test — CISA & CISM
• Vulnerability assessment — CISA & CISM
• Information security governance — CISM
• Information security strategy — CISM
• Business case — CISA & CISM
• Statement of applicability — CISA & CISM
• Post-implementation review — CISA & CISM
• Escalation — CISA & CISM