Information Technology (IT)

Terminology

Glossary

Creating three-dimensional objects by adding material layer by layer.

A system for organizing and maintaining a clean and efficient workplace in manufacturing.

Ethical standards and guidelines set by the American Bar Association.

Classifying inventory items based on their importance and value.

The management of who can access specific resources or data.

Rules that specify which users or systems are allowed access to resources.

An approach to software development that emphasizes collaboration and flexibility.

The development of computer systems capable of performing tasks that typically require human intelligence, such as learning, reasoning, and problem-solving.

Notifying administrators of backup or recovery issues.

A step-by-step set of instructions for performing a specific task or solving a problem.

Devices and equipment used for analyzing and measuring scientific samples.

Software designed to detect and remove malicious software (viruses, malware) from a computer or network.

A set of rules and protocols that allow different software applications to communicate and interact with each other.

A server that manages and secures API requests.

Long-term storage of data that may not be frequently accessed.

Applications for managing investment portfolios and assets.

A high-resolution imaging technique used in nanoscience.

Procedures for disciplining lawyers for ethical violations.

Confidential communication between an attorney and a client.

A formal review or examination of an organization's processes, practices, or records to ensure compliance.

A document summarizing the findings of an audit.

A record of actions and changes to data for audit purposes.

The process of verifying the identity of a user, system, or application.

The process of granting or denying access to specific resources or actions.

A copy of data created to safeguard against data loss in case of system failures or other issues.

Securing backup data with encryption to protect against unauthorized access.

How often backups are performed (e.g., daily, hourly).

The physical or virtual location where backup data is stored.

Continuous surveillance of backup processes and systems.

Generating reports on backup status and performance.

The guidelines for how long backups are retained.

A defined plan for when and how backups are performed.

Applications or tools used for data backup.

Dedicated storage for holding backup copies.

Confirming that backups are successful and restorable.

Data transfer capacity in a network.

A physical server dedicated to a single customer in an environment.

Creating a full system backup, including the operating system, for complete recovery.

Technology and software for collecting, analyzing, and presenting business data to support decision-making.

Extremely large and complex data sets that require specialized tools and techniques for storage, processing, and analysis.

Software used for time tracking and generating client invoices.

Access control using physical characteristics like fingerprints.

Firmware that initializes hardware components during computer startup.

The smallest unit of digital information, representing either a 0 or a 1.

The use of blockchain for secure and transparent financial transactions.

A wireless technology used for short-range communication between devices.

A network of compromised computers controlled by a malicious actor.

Software used to access and view web pages and other online content

An attack that systematically tries all possible password combinations to gain access.

A programming error or flaw that causes a software application to behave unexpectedly or improperly.

Ensuring business operations continue in the event of a disaster.

A storage location for frequently accessed data, designed to speed up data retrieval.

Tools for creating detailed construction plans and drawings.

Assessing and optimizing manufacturing capacity to meet demand.

Network of servers to deliver web content.

The process of documenting and approving changes to a construction project.

AI-driven virtual assistants for customer engagement and support.

The Center for Internet Security's best practices for enhancing cybersecurity defenses.

An executive responsible for an organization's information security.

Legal contracts that ensure the confidentiality of client information.

Secure online platforms for clients to access client-related information.

A solution for securing cloud services.

Backing up data to cloud-based storage services.

Adherence to regulatory requirements in cloud computing.

The delivery of computing services over the internet, such as storage, processing, and software.

Software for managing cloud resources.

Moving applications and data to a cloud environment.

Measures and practices for securing data and applications in cloud environments.

A nonprofit organization focused on cloud computing security.

Evaluating and enhancing security in cloud environments.

A framework for assessing and certifying the cybersecurity practices of government contractors.

A framework for governing and managing enterprise IT.

A disaster recovery facility without pre-installed equipment.

Hosting servers and infrastructure in a data center facility.

Adhering to specific laws, regulations, and standards in IT practices.

An examination of an organization's adherence to compliance standards.

A structured approach to managing and measuring compliance efforts.

Tools and processes for ensuring adherence to government regulations.

A professional responsible for ensuring an organization's adherence to regulations.

Software for creating detailed designs and schematics of products.

Software that assists in the automation of manufacturing processes.

Payment methods using near-field communication (NFC) technology.

Packaging applications and dependencies for efficient deployment.

Creating and sharing valuable content related to real estate to attract potential clients.

The ratio of users to available bandwidth in a network.

The process of selecting a contractor and signing a formal agreement.

The management of contracts from initiation through execution to analysis.

Tools for managing the entire contract lifecycle, from creation to execution.

Small pieces of data stored on a user's computer by a website to track user activity.

The core component of a computer that executes instructions and performs calculations.

Safeguarding essential systems like power and water.

Software for managing interactions and relationships with customers and potential customers.

Decentralized digital currencies like Bitcoin and Ethereum.

Adhering to regulations when dealing with cryptocurrencies and blockchain-based assets.

Software and hardware solutions for storing and managing digital currencies.

The practice of secure communication through the use of codes and ciphers.

A language used for formatting the appearance of web pages.

Software for managing interactions with buyers, sellers, and renters.

An intentional, malicious effort to breach security defenses.

Best practices for maintaining a clean and secure digital environment.

Insurance policies that protect against financial losses due to cyber incidents.

The ability of an organization to withstand and recover from cybersecurity incidents.

Information on emerging and potential cybersecurity threats.

Protecting interconnected systems in manufacturing that involve both physical and digital elements.

The practice of protecting computer systems, networks, and data from theft, damage, or unauthorized access.

Adherence to regulations and practices for protecting legal data.

Guidelines and best practices for managing cybersecurity risk.

A document outlining an organization's approach to cybersecurity.

The process of identifying and evaluating potential cybersecurity risks.

Unstructured, unused, or unknown data in a network.

Storing infrequently accessed data for long-term retention.

The process of creating copies of data to prevent data loss in case of system failures or issues.

Unauthorized access, exposure, or theft of sensitive data.

A facility used to house and manage computer systems and data storage.

Meeting regulatory requirements in data center operations.

Combining multiple data centers into fewer locations to reduce costs and improve efficiency.

Relocating data centers to ensure disaster recovery.

Daily management of data center facilities

Duplication of data center components to ensure availability.

Measures to protect data center assets.

Levels of data center reliability and redundancy.

Removing duplicate data to reduce storage requirements.

Securing data with encryption to protect against unauthorized access.

A widely used encryption algorithm for securing data.

Unauthorized or accidental exposure of sensitive data.

Strategies and technologies to prevent the unauthorized transfer or disclosure of sensitive data.

Collecting only the data necessary for a specific purpose.

Extracting meaningful patterns and information from large datasets.

An analysis of the impact of data processing activities on data privacy.

Understanding and complying with privacy laws and regulations, such as GDPR and CCPA, when handling client data.

An analysis of the impact of data processing on data protection.

Creating duplicate data copies to ensure data availability.

The physical location of data in cloud services, often related to data privacy regulations.

Guidelines for managing and storing data for compliance and legal purposes.

The process of storing, managing, and retrieving data.

Software for creating visual representations of data.

Centralized storage and retrieval of large quantities of data.

A structured collection of data organized for easy access and management.

Cloud-based database management.

Backing up databases to protect critical data.

The process of restoring operations at a data center.

An attack that floods a network or website with excessive traffic, rendering it unavailable.

The process of identifying and fixing errors or bugs in software code.

Financial services built on blockchain technology without traditional intermediaries.

The process of converting encrypted data back into its original form.

Predicting future customer demand for products to plan production and inventory.

Forecasting and planning for the demand of products in manufacturing.

A set of cybersecurity requirements for defense contractors.

Backing up all data that has changed since the last full backup.

Providing banking services and transactions online and through mobile apps.

Planning and processes for restoring IT systems after a disaster.

Outsourcing disaster recovery to a service provider.

A documented strategy for restoring IT systems in case of disaster.

A documented strategy for restoring IT systems in case of disaster which will includes planing for the physical location and access controls as-well as any required environmental factors and related for systems access and /or remote access in the event of a disaster and a "fail-over" is required for recovering the IT systems as well as the subsequent "fail-back" process and requirements for restoring the business technology systems.

An alternate location for data and operations in case of a disaster.

Periodic tests to ensure the effectiveness of recovery plans.

Technologies for preventing data leaks and breaches.

A system that translates domain names into IP addresses for network routing.

Software for organizing and securely managing documents and files.

Guidelines for the storage and disposal of documents and records.

Tools for managing and reviewing electronic documents for litigation.

Electronic patient health information governed by HIPAA.

Electronic signatures for signing documents.

Processing data closer to the source for low-latency applications.

The process of discovering, collecting, and producing electronic evidence in legal cases.

A nonprofit organization focused on information technology in higher education.

Scaling cloud resources up or down based on demand.

The process of identifying, collecting, and producing electronically stored information (ESI) for legal proceedings.

Digital records of a patient's health information.

Digital records of patient health information within a single healthcare organization.

Using digital signatures to execute legal agreements securely.

Automated email responses to inquiries and requests.

Sending property-related emails to potential buyers or renters.

Technology for quickly communicating safety alerts to construction workers.

The process of converting data into a code to protect it from unauthorized access.

Measures to protect individual devices (e.g., laptops, smartphones) from security threats.

Integrated software for managing all aspects of a business.

Integrating ERP systems with processes to streamline operations.

A standard for wired network connections.

Returning to primary systems after a failover event.

Switching to backup systems or services when primary systems fail.

U.S. regulations governing procurement processes for federal contracts.

U.S. agency regulating communications, including telecommunications.

The set of rules and guidelines governing federal procurement.

A program for standardizing security assessment and authorization for cloud products and services.

Backing up individual files or directories.

A network security device or software that monitors and filters incoming and outgoing network traffic based on established security policies.

Configurations that determine what traffic is allowed or blocked by a firewall.

Software embedded in hardware devices.

U.S. law for securing federal government information systems.

U.S. law providing public access to government records.

A standard network protocol used for transferring files between computers.

Creating a complete copy of all data in a system or application.

European Union regulations for data protection and privacy.

Ensuring the safe and ethical use of gene-editing technologies, such as CRISPR-Cas9.

Setting geographic boundaries for network access.

Technology for capturing, managing, and analyzing geographic data.

Replicating data and systems across geographic locations.

Tools for spatial data analysis and mapping.

U.S. law governing financial institutions' data security and privacy.

Ensuring government agencies adhere to applicable laws and regulations.

The process of obtaining contracts to provide goods or services to government agencies.

Ensuring government agencies conform to specific industry or sector regulations.

Contracts awarded to vendors that provide goods and services to federal agencies.

A person who gains unauthorized access to computer systems or networks.

The physical components of a computer or electronic device.

The electronic sharing of patient data among healthcare organizations.

The practice of managing healthcare data and information.

Integrated systems for managing and storing health data.

U.S. law for protecting patient privacy and data security.

IT systems used in healthcare for various purposes.

Designing systems to minimize downtime and ensure continuous operation.

A group of interconnected systems that provide redundancy and failover.

U.S. healthcare industry regulations for data privacy and security.

U.S. legislation promoting the adoption of EHRs.

A set of standards for exchanging electronic health information.

Arrangement to optimize data center cooling.

A disaster recovery facility with fully operational systems and data.

The use of supercomputers for scientific simulations and data analysis.

The standard markup language used to create and format web pages.

An encrypted version of HTTP used for secure data transmission.

Combining public and private clouds for greater flexibility.

Software that enables virtualization on physical servers.

Cloud services providing virtualized computing resources.

Processes and technologies for managing user identities and access.

Capturing a snapshot of an entire system for recovery.

The process of managing and mitigating the aftermath of a cybersecurity incident.

A documented strategy for responding to cybersecurity incidents.

Procedures for addressing security incidents.

Backing up only data that has changed since the last backup.

Fundraising using cryptocurrency tokens and blockchain technology.

A device that uses the internet for communications that does not require a computer.

The process of identifying unauthorized access or malicious activities on a network.

A security system that monitors network traffic for suspicious activities and intrusions.

A security system that not only detects but also takes action to prevent potential intrusions.

Tools for managing and optimizing manufacturing material and product inventory.

The network of interconnected physical devices that can communicate and exchange data.

A unique numeric label assigned to each device participating in a computer network, used for identification and addressing.

Allowing or blocking specific IP addresses.

A protocol suite for securing internet communications.

An international standard for environmental management systems.

An international standard for service management systems.

An international standard for information security management systems (ISMS).

An international standard for quality management systems in manufacturing.

U.S. regulations governing the export and import of defense-related articles and services.

A set of practices for IT service management.

A widely used programming language for creating web and mobile applications.

A programming language used for creating interactive web pages and web applications.

A strategy for reducing inventory to minimize storage costs.

The practice of continuous improvement in manufacturing processes.

Metrics used to measure the performance and success of something affecting its performance.

Metrics used to measure the performance and success of manufacturing operations.

Procedures and technologies for verifying the identity of clients and customers.

Hardware for managing multiple servers.

A network that connects computers and devices within a limited area, like a home, office, or campus.

The delay in data transmission in a network.

DMADV is the acronym for Define, Measure, Analyze, Design, and Verify, the Lean Six Sigma method for designing new processes and products. DMAIC is the acronym for Define, Measure, Analyze, Improve and Control, the five key phases of the Lean Six Sigma framework used in solving business and process problems.

A legal requirement to preserve specific documents or data.

Distributing network traffic across multiple servers.

Storing backup data on-site, often on external drives or network-attached storage.

Communication between machines and devices in manufacturing for automation and data exchange.

A broad term for malicious software, including viruses, spyware, and ransomware.

The process of dissecting malicious software to understand its functionality and intent.

A unique pattern or characteristic used to identify specific malware.

Intercepting and altering communication between two parties without their knowledge.

Information about data, such as creation date, author, or file size.

Creating an exact copy of data in real-time.

Software for managing and securing mobile devices used in construction.

Mobile apps and platforms for making payments and transfers.

A protocol for efficient data transfer.

Using multiple cloud service providers for redundancy or specific services.

A security method that requires multiple forms of verification for access.

Storage devices connected to a network for file sharing.

Delay in data transmission over a network.

A set of rules for data exchange between devices on a network.

Measures to protect data during transmission across networks.

Rules and procedures for securing a network.

Dividing a network into isolated segments for security.

Virtualizing network functions for flexibility.

Federal agency that provides cybersecurity and compliance guidance.

Adhering to the cybersecurity framework developed by the National Institute of Standards and Technology (NIST).

The National Institute of Standards and Technology's framework for improving critical infrastructure cybersecurity.

Failing to meet regulatory requirements or standards.

Storing backup data at a remote location to protect against physical disasters.

Programs that encourage government agencies to share data with the public.

Software or projects with source code available for modification and redistribution.

System software that manages computer hardware and software resources and provides various services for computer programs.

Contracting third-party providers for IT services.

Cloud services offering development and deployment tools.

Capturing and inspecting data packets to monitor network traffic.

Software that securely stores and manages passwords.

The effectiveness of a password in resisting attacks.

A software update or fix provided to address known vulnerabilities or bugs.

Hardware for connecting and managing network cables.

Security standards for handling credit card data and transactions.

Tools that authorize and process online payments from customers.

Standards for securing payment card data.

Direct transfers of funds between individuals through mobile apps.

Fines or other punitive measures imposed for non-compliance.

A controlled, simulated attack on a system to identify vulnerabilities and weaknesses.

Ethical hacking to identify network vulnerabilities.

Patient-controlled digital records of their health information.

A deceptive technique used to trick individuals into revealing personal or confidential information.

Deceptive attempts to trick individuals into revealing sensitive information.

Restricting entry to data center facilities.

Information that can be used to identify an individual.

A system for managing digital certificates and keys used for secure communication.

A digital computer used to control manufacturing processes.

Locations where internet service providers connect to a network.

Online advertising where advertisers pay for clicks on their ads.

Incorporating data privacy into the design of systems, applications, and processes.

A document that outlines how an organization handles personal information.

A cloud infrastructure used exclusively by a single organization.

Isolating devices on the same network for added security.

The use of technology to automate and control processes.

Sensitive patient information protected under HIPAA.

Cloud services offered by third-party providers for public use.

A versatile and high-level programming language often used for web development and data analysis.

Implementing technology to automate quality control processes and ensure compliance with quality standards.

Software and processes for ensuring product quality and compliance with industry standards.

Using mathematical and statistical models for financial decision-making.

Distributing power to rack-mounted equipment.

Space for hosting servers and equipment in a rack.

A unit of measurement for rack-mounted equipment.

A data storage technology that combines multiple disk drives into a single unit.

Temporary memory used for storing data that the CPU is currently working on.

Malware that encrypts a victim's data and demands a ransom for decryption.

A documented strategy for restoring IT systems in case of disaster.

The maximum allowable data loss in a disaster.

A location where systems can be restored in a disaster.

Regular testing to ensure successful data recovery.

The maximum acceptable time for systems to be down.

Simulating security attacks (Red) and defenses (Blue).

A document from which confidential or privileged information has been removed.

Duplication of critical systems for fault tolerance.

Storage technology for data redundancy.

Technology solutions designed to help financial institutions comply with regulations.

Conforming to legal requirements set by government agencies or industry bodies.

An informal document used to solicit information from potential vendors and contractors for the purpose of evaluating them as potential candidates to participate in a RFQ or RFP.

A formal document used to solicit a comprehensive set of services or solutions to solve a business need with questions to assist in the selection of a potential vendors and contractors.

A semi-formal document used to solicit price quotes for a prescribed product or set of solutions from potential vendors and contractors.

A contract outlining the terms of legal representation and fees.

The use of RFID tags to track and manage construction materials.

The right for individuals to request the erasure of their personal data.

Software for assessing the risk associated with systems.

Tools for assessing, monitoring, and mitigating financial risks.

A security approach that adapts authentication requirements based on perceived risk.

The highest level of access and control in a computer system.

Malicious software that gives unauthorized access while hiding its presence.

A networking device that directs data packets between computer networks, ensuring efficient data transmission.

Maximum acceptable downtime for disaster recovery.

Tough and durable mobile devices designed for construction site conditions.

Cloud services providing software applications via the internet.

U.S. legislation that sets requirements for financial reporting and internal controls.

A framework for agile project management and product development.

Writing software with security in mind to prevent vulnerabilities.

Encrypted email and messaging platforms for secure communications.

Digital wallets that store payment information securely for online and mobile transactions.

Tools for secure collaboration on documents among teams and clients.

Platforms for securely sharing documents with stateholders and third parties.

Encrypted email platforms for communicating sensitive information.

A protected and isolated computing area.

Tools for securely sharing and collaborating on documents.

Encrypted messaging applications for confidential communications.

Secure platforms for processing online payments and transactions.

Encryption certificates for secure data transmission.

An evaluation of an organization's security posture.

The process of evaluating and authorizing information systems for use.

A systematic evaluation of an organization's security infrastructure and policies.

Education provided to employees about cybersecurity threats and best practices.

A security incident where an unauthorized party gains access to a system or data.

Surveillance cameras for monitoring and securing properties.

A digital document that verifies the identity of a website or entity and enables secure connections.

An event that could potentially harm an organization's security.

A documented strategy for responding to cybersecurity incidents.

Tools for monitoring and managing cybersecurity events.

An update or modification to a software product to fix vulnerabilities.

The process of applying updates to software and systems to fix vulnerabilities.

A set of rules and guidelines defining an organization's approach to security.

Ensuring that security policies are followed and enforced.

A physical or digital device used for authentication.

Strategies to improve the visibility of real estate websites in search engine results.

A computer or software system that provides services or resources to other computers, known as clients, over a network.

Running code without managing servers.

A contract outlining cloud service provider obligations and expectations.

The division of security responsibilities between cloud providers and customers.

A text messaging service component of most telephone, Internet and mobile device systems.

A comprehensive system that provides real-time analysis of security events.

A system that allows users to access multiple services with a single set of credentials.

A data-driven approach for process improvement and quality control in manufacturing.

Contractual commitments regarding service quality.

Electronic locks that can be controlled and monitored remotely.

The protocol used for sending email over the internet.

A point-in-time copy of the state of a virtual machine.

A facility for monitoring, detecting, and responding to cybersecurity incidents.

Techniques used to manipulate individuals into revealing sensitive information.

Promoting properties and services on social media platforms.

Programs and applications that run on a computer.

Cloud-based software applications for legal tasks.

U.S. legislation governing financial and accounting practices to prevent fraud.

A domain-specific language used for managing and querying databases.

Secure socket layer/transport layer security for data encryption.

A high-speed network for connecting storage devices to servers.

The amount of data that can be stored in a storage system.

Reducing storage space by compressing data.

Abstracting physical storage into virtualized pools.

Backing up an entire system, including the operating system.

Backing up data to magnetic tapes for long-term storage.

U.S. law governing telemarketing and robocalls.

The online environment related to management of a system, typoically a SaaS application (Microsoft 365)

An evaluation by an external party to assess an organization's compliance.

An individual or group responsible for a cybersecurity threat.

Information about potential cybersecurity threats and vulnerabilities.

A security process requiring two forms of authentication for access.

Backup power for critical equipment.

A web address that specifies the location of a resource on the internet.

A standard for connecting and transferring data between devices.

A system for tracking and managing changes to software code.

Virtual meetings for remote client meetings and legal proceedings.

Centralized management of law firm desktops and applications.

Logical segmentation of a network into subnetworks.

A point-in-time copy of a virtual machine's state.

Duplicating virtual machines for failover.

Isolated virtual cloud networks.

A technology that creates a secure and encrypted connection over a public network.

Emulating tape libraries for backup and recovery.

The process of creating a virtual, rather than a physical, version of something like an operating system or a server.

Malicious software designed to replicate and spread, often causing harm to computer systems.

A database of known virus patterns used by antivirus software.

Technology for making voice calls over the internet.

A technology that creates a secure and encrypted connection over a public network, often used for remote access or privacy.

A weakness or flaw in a system or application that can be exploited by attackers.

Identifying and assessing vulnerabilities in systems.

A network that spans a larger geographical area, connecting multiple LANs and often relying on public or private data transmission services.

A disaster recovery facility with some pre-installed equipment but not fully operational.

A service that provides server space and resources for hosting websites.

A language for encoding documents that is both human-readable and machine-readable.

A security flaw unknown to the software vendor.

A security model where no one, whether inside or outside the organization, is trusted by default.

A security approach based on the principle of "never trust, always verify".

An attack that requires no user interaction.

A security flaw in software or hardware that is exploited by attackers before the vendor releases a fix or patch.

A cryptographic method for verifying data without revealing it.

Automatically configuring network devices.