Glossary

The coordinated and ongoing set of processes and activities that ensure long-term, error-free storage of digital information, with means for retrieval and interpretation, for the time span the information is required

A cryptographic process that allows the proof of the source (with non-repudiation) and the verification of the integrity of that data.

A device that allows data to flow in only one direction.

Combining a set of policies, tools and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. Disaster recovery focuses on the IT or technology systems supporting critical business functions, as opposed to business continuity

A distributed form of denial-of-service attack.

Direct Memory Access

An environment that includes system resources and entities with the right to access resources as defined by a common security policy, model, or architecture.(ACSI 1D) (O) See also security domain.

The naming system that translates domain names into IP addresses.

An email authentication protocol designed to give email domain owners the ability to protect their domain from unauthorised use, commonly known as email spoofing.

A method of implementing the framework in which the organisation selects a single domain and applies all applicable principles before moving to the next.