Glossary

A cryptographic process that allows the proof of the source (with non-repudiation) and the verification of the integrity of that data.

A device that allows data to flow in only one direction.

Combining a set of policies, tools and procedures to enable the recovery or continuation of vital technology infrastructure and systems following a natural or human-induced disaster. Disaster recovery focuses on the IT or technology systems supporting critical business functions, as opposed to business continuity

A distributed form of denial-of-service attack.

Direct Memory Access

An environment that includes system resources and entities with the right to access resources as defined by a common security policy, model, or architecture.(ACSI 1D) (O) See also security domain.

The naming system that translates domain names into IP addresses.

An email authentication protocol designed to give email domain owners the ability to protect their domain from unauthorised use, commonly known as email spoofing.

A method of implementing the framework in which the organisation selects a single domain and applies all applicable principles before moving to the next.

A system for authenticating emails that works with modern Message Transfer Agent systems. This resource was created to help fight spam, and uses a digital signature to help email recipients determine whether an email is legitimate.