Terminology

Cybersecurity Glossary

A comprehensive reference of cybersecurity standards, compliance frameworks, and technical terminology used across the industry.

C H I N O P R S T V Z

C

CMMC

Cybersecurity Maturity Model Certification - a US Department of Defense framework for assessing and certifying the cybersecurity posture of defense contractors.

CSA

Component Security Assurance - an ISASecure certification scheme that validates the security of individual industrial automation components against IEC 62443-4-2.

CSMS

Cyber Security Management System - a systematic approach to managing cybersecurity across an organization's products, processes, and supply chain.

H

HMI

Human-Machine Interface - the user interface or dashboard that connects operators to industrial control systems for monitoring and control.

I

ICS

Industrial Control Systems - a general term encompassing several types of control systems used in industrial production and critical infrastructure.

IEC 62443

The international series of standards for Industrial Automation and Control System (IACS) security, covering policies, systems, and components.

ISO 27001

The international standard for Information Security Management Systems (ISMS), providing a systematic approach to managing sensitive information.

N

NIST 800-171

NIST Special Publication 800-171 provides recommended security requirements for protecting Controlled Unclassified Information (CUI) in non-federal systems.

O

OT Security

Operational Technology Security - the practice of protecting hardware and software that monitors and controls physical processes and industrial equipment.

P

Penetration Testing

An authorized simulated cyber attack on a system, network, or application to evaluate its security and identify exploitable vulnerabilities.

PLC

Programmable Logic Controller - a ruggedized digital computer used for automation of industrial electromechanical processes.

R

Risk Assessment

A systematic process of identifying, analyzing, and evaluating cybersecurity risks to determine appropriate risk treatment measures.

S

SCADA

Supervisory Control and Data Acquisition - a control system architecture used for high-level process supervision of industrial operations.

SDLA

Security Development Lifecycle Assurance - an ISASecure certification scheme verifying that a supplier's development processes meet IEC 62443-4-1 requirements.

SWIFT CSP

The SWIFT Customer Security Programme - a set of mandatory security controls for all institutions connected to the SWIFT financial messaging network.

T

TARA

Threat Analysis and Risk Assessment - a systematic methodology for identifying, analyzing, and evaluating cybersecurity threats and risks in automotive systems.

TISAX

Trusted Information Security Assessment Exchange - the European automotive industry's standardized information security assessment and exchange mechanism.

V

VDA ISA

VDA Information Security Assessment - the audit catalog used as the basis for TISAX assessments in the automotive industry.

Vulnerability Assessment

A systematic process of identifying, quantifying, and prioritizing security vulnerabilities in systems, networks, and applications.

Z

Zero Trust

A security model based on the principle of 'never trust, always verify' that requires strict identity verification for every person and device accessing resources.

Need Clarification?

Our cybersecurity experts can help you understand how these standards and frameworks apply to your organization.