Security terms starting with A

64 terms

access right, opportunity, or means of finding, using, or retrieving information
Access Authority An entity responsible for monitoring and granting access privileges for other authorized entities.
access control The mechanisms for limiting access to certain information based on a user's identity and membership in various predefined groups.
Access Control Lists (ACLs) A register of: 1) users (including groups, machines, processes) who have been given permission to use a particular system resource, and 2) the types of…
Account Management, User Involves the process of requesting, establishing, issuing, and closing user accounts; 2) tracking users and their respective access authorizations; and 3)…
Accountability The principle that individuals using a facility or a computer system must be identifiable.
Accreditation If a Marketplace health plan is approved, this is the “seal of approval” given to the plan by an independent organization to show that the plan meets…
Accreditation Authority SEE Authorizing Official
Accreditation Boundary All components of an information system to be accredited by an authorizing official and excludes separately accredited systems, to which the information…
Accreditation Package The evidence provided to the authorizing official to be used in the security accreditation decision process.
Accrediting Authority Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations…
Accuracy Department of Defense parlance for the notion that information has been maintained and transferred in such a way as to be inviolate (the information has…
Activation Data Private data, other than keys, that are required to access cryptographic modules.
Active Content Active content refers to electronic documents that are able to automatically carry out or trigger actions on a computer platform without the intervention…
Adequate Security Security commensurate with the risk and the magnitude of harm resulting from the loss, misuse, or unauthorized access to or modification of information.
Administrative Safeguards Administrative actions, policies, and procedures to manage the selection, development, implementation, and maintenance of security measures to protect…
Advanced Encryption Standard (AES) The Advanced Encryption Standard specifies a U.S. Government-approved cryptographic algorithm that can be used to protect electronic data.
Agency A firm that solicits insurance for one or more insurance carriers. It also may issue policies and adjust losses.
Agency Certification Authority (CA) A CA that acts on behalf of an Agency, and is under the operational control of an Agency.
Agent Agent means any individual, other than a broker-dealer, who represents a broker-dealer or issuer in effecting or attempting to effect purchases or sales…
Algorithm A detailed formula or set of steps for solving a particular problem. To be an algorithm, a set of rules must be unambiguous and have a clear stopping…
Analysis A process in which anything complex is separated into simple or less complex parts.
ANSI (American National Standards Institute) A private, non-profit organization that administers and coordinates the U.S. voluntary standardization and conformity assessment system.
Antivirus Software A program that monitors a computer or network to identify all major types of malware and prevent or contain malware incidents.
API (Application Programming Interface) A set of functions that gives programmers access to another application's internal features from within their own application.
Applicant inventor or joint inventors who are applying for a patent on their own invention, or the person mentioned in 37 CFR 1.42, 1.43 or 1.
Application Under the Equal Credit Opportunity Act (ECOA), an oral or written request for an extension of credit that is made in accordance with the procedures…
Application Content Filtering Application content filtering is performed by a software proxy agent to remove or quarantine viruses that may be contained in email attachments, to block…
Approved Federal Information Processing Standard (FIPS) approved or National Institute of Standards and Technology (NIST) recommended.
Approved Mode of Operation A mode of the cryptographic module that employs only Approved security functions (not to be confused with a specific mode of an Approved security…
Approved Security Function A security function (e.g., cryptographic algorithm, cryptographic key management technique, or authentication technique) that is either a) specified in an…
Arch A fingerprint pattern in which the friction ridges enter from one side, make a rise in the center, and exit on the opposite side.
Assessment Method A focused activity or action employed by an assessor for evaluating a particular attribute of a security control.
Assessment Procedure A set of activities or actions employed by an assessor to determine the extent to which a security control is implemented correctly, operating as…
Asset Anything owned that has value; any interest in real property or personal property that can be used for payment of debts.
Assurance One of the five Security Goals. It involves support for our confidence that the other four security goals (integrity, availability, confidentiality, and…
Asymmetric Keys Two related keys, a public key and a private key that are used to perform complementary operations, such as encryption and decryption or signature…
Attack Signature A specific sequence of events indicative of an unauthorized access attempt.
Attempt The submission of a single set of biometric sample to a biometric system for identification or verification.
Attribute Authority An entity, recognized by the Federal Public Key Infrastructure (PKI) Policy Authority or comparable Agency body as having the authority to verify the…
Audit An audit is a professional, independent examination of a company's financial statements and accounting documents following generally accepted accounting…
Audit Data Chronological record of system activities to enable the reconstruction and examination of the sequence of events and changes in an event.
Audit Reduction Tools Preprocessors designed to reduce the volume of audit records to facilitate manual review.
Audit Trail In computer security systems, a chronological record of when users logged in, how long they were engaged in various activities, what they were doing, and…
Authenticate To confirm the identity of an entity when that identity is presented.
authentication The process of validating the credentials of a person, computer process, or device.
Authentication Code A cryptographic checksum based on an Approved security function (also known as a Message Authentication Code (MAC)).
Authentication Mechanism Hardware or software-based mechanisms that force users to prove their identity before accessing data on a device.
Authentication Mode A block cipher mode of operation that can provide assurance of the authenticity and, therefore, the integrity of data.
Authentication Protocol The protocol by which an entity on a network proves its identity to a remote entity.
Authentication Tag A pair of bit strings associated to data to provide assurance of its authenticity.
Authentication Token Authentication information conveyed during an authentication exchange.
Authentication, Electronic The process of establishing confidence in user identities electronically presented to an information system.
authenticity sum of the qualities of a record that establish the origin, reliability, trustworthiness, and correctness of its content
Authorization The issuance of approval, by a credit card issuer, merchant, or other affiliate, to complete a credit card transaction.
Authorize Processing The official management decision given by a senior agency official to authorize operation of an information system and to explicitly accept the risk to…
Authorizing Official Official with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to agency operations…
Authorizing Official Designated Representative Individual selected by an authorizing official to act on their behalf in coordinating and carrying out the necessary activities required during the…
Automated Biometric Identification System (ABIS) Department of Defense (DOD) system implemented to improve the U.S. government's ability to track and identify national security threats.
Automated Fingerprint Identification System (AFIS) A system designed to significantly speed and increase the accuracy of the finger printing process.
Automated Key Transport The transport of cryptographic keys, usually in encrypted form, using electronic means such as a computer network (e.g.
Automated Password Generator An algorithm which creates random passwords that have no association with a particular user.
Availability A reflection of the form and location of nutritional elements and their suitability for absorption.
Awareness (Information Security) Activities which seek to focus an individuals attention on an (information security) issue or set of issues.