CompTIA Security+ SY0-701 Acronym List

250 Security+ acronyms, covering 209 of the 320 on CompTIA's SY0-701 acronym list, each with a plain-English definition. Skim them here, then drill the ones you keep forgetting in the interactive finder.

250 acronyms|17 topic groups

Drill these interactively

Security+ SY0-701 exam objectives Study with free flashcards

How many acronyms are on the Security+ exam?

CompTIA's SY0-701 exam objectives end with an acronym list of 326 entries. That is 320 distinct acronyms, because MAC, PAM, RA, RBAC, and SAN each appear with more than one meaning. CompTIA describes it as the list of acronyms that appear on the exam and encourages candidates to know all of them. This page defines 209 of the 320; the PDF below has the rest.

Source: CompTIA Security+ SY0-701 Exam Objectives, version 5.0 (PDF), acronym list, accessed Sep 25, 2026.

Application Security (16)

APIApplication Programming Interface: Set of protocols and tools enabling software applications to communicate with each other.
ASLRAddress Space Layout Randomization: OS security technique that randomizes memory addresses used by processes to prevent buffer overflow exploits.
CAPTCHACompletely Automated Public Turing test to tell Computers and Humans Apart: Challenge-response test used to determine whether a user is human, preventing automated bot abuse.
CMSContent Management System: Software platform for creating and managing digital content, often web-based.
CSRFCross-Site Request Forgery: Web attack that forces an authenticated user to submit unintended requests to a trusted application.
DEPData Execution Prevention: Hardware/OS security feature preventing code execution from memory regions marked as non-executable.
DLLDynamic Link Library: Shared library file in Windows containing code and data that can be loaded by multiple programs simultaneously.
ERPEnterprise Resource Planning: Integrated software system managing core business processes like finance, HR, and supply chain.
HTMLHypertext Markup Language: Standard markup language for creating and structuring content on web pages.
JSONJavaScript Object Notation: Lightweight data interchange format that is human-readable and easy for machines to parse and generate.
OWASPOpen Web Application Security Project: Nonprofit organization producing tools, guides, and the Top 10 list for web application security.
SQLStructured Query Language: Standard language for managing and querying relational databases; SQL injection is a top web vulnerability.
URIUniform Resource Identifier: String identifying a resource by name, location, or both, encompassing both URLs and URNs.
URLUniform Resource Locator: Web address specifying the protocol, host, and path to locate a resource on the internet.
XMLExtensible Markup Language: Markup language defining rules for encoding documents in a human-readable and machine-readable format.
XSSCross-Site Scripting: Web vulnerability where attackers inject malicious scripts into trusted websites viewed by other users.

Cryptography (41)

AESAdvanced Encryption Standard: Symmetric block cipher using 128, 192, or 256-bit keys; the current standard for encrypting data at rest and in transit.
AHAuthentication Header: IPSec protocol providing data integrity and origin authentication but not encryption.
CACertificate Authority: Trusted entity that issues, manages, and revokes digital certificates within a PKI hierarchy.
CCMPCounter Mode with Cipher Block Chaining Message Authentication Code Protocol: AES-based encryption protocol used in WPA2 to provide confidentiality, integrity, and authentication for wireless frames.
CRLCertificate Revocation List: Published list of serial numbers for certificates that a CA has revoked before their expiration date.
CSRCertificate Signing Request: Encoded message sent to a CA containing the public key and identity information to request a digital certificate.
DESData Encryption Standard: Legacy symmetric cipher using a 56-bit key, now considered insecure and replaced by AES.
DHEDiffie-Hellman Ephemeral: Key exchange variant that generates a new key pair per session, providing perfect forward secrecy.
DSADigital Signature Algorithm: Federal standard for digital signatures providing authentication and non-repudiation.
ECCElliptic Curve Cryptography: Public-key cryptography based on elliptic curve mathematics, providing strong security with smaller key sizes.
ESPEncapsulating Security Payload: IPSec protocol providing confidentiality, data integrity, and authentication for IP packets.
GCMGalois/Counter Mode: Authenticated encryption mode providing both confidentiality and data integrity at high speed.
GPGGNU Privacy Guard: Open-source implementation of the OpenPGP standard for encrypting and signing data and communications.
HMACHash-based Message Authentication Code: Mechanism combining a cryptographic hash with a secret key to verify both integrity and authenticity of a message.
HSMHardware Security Module: Tamper-resistant hardware device that manages, generates, and stores cryptographic keys securely.
IKEInternet Key Exchange: Protocol used to negotiate and establish security associations and keys for IPSec VPN tunnels.
IPSecInternet Protocol Security: Suite of protocols that authenticates and encrypts IP packets, commonly used for VPN tunnels.
IVInitialization Vector: Random or pseudo-random value prepended to plaintext before encryption to ensure unique ciphertext output.
KEKKey Encryption Key: Cryptographic key used to protect other keys during transport or storage.
OCSPOnline Certificate Status Protocol: Protocol for real-time checking of a digital certificate's revocation status against the CA.
PBKDF2Password-Based Key Derivation Function 2: Key derivation function applying a pseudorandom function with many iterations to slow brute-force attacks.
PEMPrivacy Enhanced Mail: Base64-encoded file format for storing certificates and cryptographic keys, recognizable by BEGIN/END headers.
PFSPerfect Forward Secrecy: Cryptographic property ensuring session keys are not compromised if the long-term private key is leaked.
PGPPretty Good Privacy: Encryption program providing cryptographic privacy and authentication for email and file encryption.
PKIPublic Key Infrastructure: Framework of roles, policies, and technology for creating, managing, and revoking digital certificates.
PSKPre-Shared Key: Shared secret distributed in advance between parties for authenticating a connection, commonly used in Wi-Fi and VPNs.
RARegistration Authority: Entity in a PKI that verifies certificate applicant identities before the CA issues a certificate.
RACEResearch and Development in Advanced Communications Technologies in Europe: European R&D program in advanced communications that contributed to the RIPEMD hash function family.
RSARivest, Shamir, Adleman: Asymmetric encryption algorithm based on the difficulty of factoring large prime numbers, widely used for digital signatures and key exchange.
SANSubject Alternative Name: X.509 certificate extension listing additional hostnames or IPs that the certificate is valid for.
SCEPSimple Certificate Enrollment Protocol: Protocol for simplified certificate issuance and management, commonly used for device enrollment.
SHASecure Hash Algorithm: Family of cryptographic hash functions (SHA-1, SHA-256, SHA-3) producing fixed-size digests for integrity verification.
SSLSecure Sockets Layer: Deprecated cryptographic protocol for securing communications; superseded by TLS.
TKIPTemporal Key Integrity Protocol: Encryption protocol used in WPA that wraps WEP with per-packet key mixing; now deprecated in favor of CCMP.
TLSTransport Layer Security: Cryptographic protocol providing encrypted, authenticated communication channels; successor to SSL.
WEPWired Equivalent Privacy: Obsolete wireless encryption standard with severe cryptographic weaknesses; should never be used.
WPAWi-Fi Protected Access: Wireless security protocol using TKIP encryption, an interim improvement over WEP before WPA2.
WPA2Wi-Fi Protected Access 2: Wireless security standard using AES-CCMP encryption, mandatory for Wi-Fi certification since 2006.
WPA3Wi-Fi Protected Access 3: Latest wireless security standard with SAE handshake, 192-bit enterprise mode, and forward secrecy.
WTLSWireless Transport Layer Security: Security protocol designed for wireless networks, based on TLS but optimized for low-bandwidth environments.
X.509X.509 Certificate Standard: ITU-T standard defining the format of public key certificates used in TLS, email signing, and code signing.

Data Protection (3)

EFSEncrypting File System: Windows feature that provides file-level encryption on NTFS volumes using certificate-based keys.
FDEFull Disk Encryption: Encryption of an entire storage device so all data is protected at rest, including the OS and temp files.
RAIDRedundant Array of Independent Disks: Storage technology combining multiple drives for redundancy, performance, or both using levels like 0, 1, 5, 6, and 10.

General Security Concepts (1)

CIAConfidentiality, Integrity, and Availability: The three core principles of information security that guide security policy and controls.

Hardware (2)

UEFIUnified Extensible Firmware Interface: Modern firmware interface replacing BIOS, supporting Secure Boot, larger disks, and faster initialization.
USBUniversal Serial Bus: Standard interface for connecting peripherals, providing data transfer and power delivery.

Identity and Access Management (29)

AAAAuthentication, Authorization, and Accounting: Security framework that controls who can access resources, what they can do, and tracks their activity.
ABACAttribute-Based Access Control: Access control model evaluating attributes (user, resource, environment) to make authorization decisions.
ADActive Directory: Microsoft directory service for managing users, computers, and resources in a Windows domain environment.
CHAPChallenge Handshake Authentication Protocol: Authentication protocol using a three-way handshake with a shared secret, periodically re-verifying identity.
DACDiscretionary Access Control: Access control model where the resource owner determines who can access the resource.
EAPExtensible Authentication Protocol: Framework providing multiple authentication methods for wireless and point-to-point connections.
FACLFile System Access Control List: OS-level list specifying permissions granted to users and groups for file system objects.
GPOGroup Policy Object: Active Directory mechanism for centrally managing and configuring settings for users and computers in a domain.
HOTPHMAC-based One-Time Password: OTP algorithm generating passwords based on a counter value and shared secret.
IAMIdentity and Access Management: Framework of policies and technologies ensuring the right individuals access the right resources at the right time.
KDCKey Distribution Center: Central component in Kerberos that issues tickets for authenticated access to network services.
LDAPLightweight Directory Access Protocol: Protocol for accessing and managing distributed directory services over TCP port 389.
LDAPSLightweight Directory Access Protocol Secure: LDAP encrypted with TLS over port 636, securing directory queries and authentication.
MACMandatory Access Control: Access control model where the OS enforces access based on classification labels assigned to subjects and objects.
MFAMulti-Factor Authentication: Authentication requiring two or more verification factors from different categories: something you know, have, or are.
NTLMNT LAN Manager: Legacy Windows authentication protocol using challenge-response; considered less secure than Kerberos.
OAUTHOpen Authorization: Open standard for token-based authorization allowing third-party services limited access without sharing credentials.
OIDCOpenID Connect: Identity layer on top of OAuth 2.0 that provides authentication and user identity verification.
PAMPrivileged Access Management: Security framework for controlling, monitoring, and auditing all privileged access to critical resources.
PAPPassword Authentication Protocol: Simple authentication protocol transmitting credentials in cleartext; insecure and largely deprecated.
PEAPProtected Extensible Authentication Protocol: EAP variant that creates an encrypted TLS tunnel for secure authentication, commonly used in enterprise Wi-Fi.
RADIUSRemote Authentication Dial-In User Service: AAA protocol providing centralized authentication, authorization, and accounting for network access.
RBACRole-Based Access Control: Access control model assigning permissions to roles rather than individuals, simplifying administration.
SAMLSecurity Assertion Markup Language: XML-based framework for exchanging authentication and authorization data between an IdP and a service provider.
SCIMSystem for Cross-domain Identity Management: Open standard for automating the exchange of user identity information between identity domains.
SSOSingle Sign-On: Authentication scheme allowing users to log in once and access multiple applications without re-authenticating.
TACACS+Terminal Access Controller Access-Control System Plus: Cisco AAA protocol using TCP port 49, encrypting the full authentication session for network device administration.
TGTTicket-Granting Ticket: Kerberos credential obtained after initial authentication, used to request service tickets without re-entering credentials.
TOTPTime-based One-Time Password: OTP algorithm generating short-lived codes based on the current time and a shared secret.

Network Infrastructure (1)

SDNSoftware-Defined Networking: Architecture separating the control plane from the data plane, enabling centralized and programmable network management.

Network Security (14)

ACLAccess Control List: A set of rules that filters network traffic or defines permissions for accessing system resources.
DKIMDomainKeys Identified Mail: Email authentication method using digital signatures to verify the sender domain and message integrity.
DMARCDomain-based Message Authentication, Reporting, and Conformance: Email authentication policy that builds on SPF and DKIM to prevent domain spoofing and phishing.
DMZDemilitarized Zone: Network segment between the internal network and the internet, hosting public-facing services while protecting internal resources.
DNSSECDomain Name System Security Extensions: Suite of extensions that adds cryptographic authentication to DNS responses to prevent spoofing.
NACNetwork Access Control: Security solution that enforces policy compliance on devices before granting network access.
NGFWNext-Generation Firewall: Advanced firewall combining traditional filtering with application awareness, IPS, and threat intelligence.
RASRemote Access Server: Server enabling remote users to connect to a network over dial-up or VPN connections.
SPFSender Policy Framework: Email authentication DNS record specifying which mail servers are authorized to send email for a domain.
SWGSecure Web Gateway: Security solution filtering unwanted software and malware from web traffic and enforcing internet policy.
UTMUnified Threat Management: All-in-one security appliance combining firewall, IDS/IPS, antivirus, content filtering, and VPN in a single device.
VLANVirtual Local Area Network: Logical network segmentation at Layer 2, isolating broadcast domains on a switch without separate physical networks.
VPNVirtual Private Network: Encrypted tunnel over a public network providing secure remote access or site-to-site connectivity.
WAFWeb Application Firewall: Security device filtering and monitoring HTTP traffic to protect web applications from attacks like XSS and SQL injection.

Network Services (1)

UPnPUniversal Plug and Play: Protocol suite enabling devices to discover each other and establish network services automatically, posing security risks.

Networking (31)

ARPAddress Resolution Protocol: Layer 2 protocol that maps an IP address to a MAC address on a local network segment.
BGPBorder Gateway Protocol: Path-vector exterior gateway protocol used to exchange routing information between autonomous systems on the internet.
DHCPDynamic Host Configuration Protocol: Protocol that automatically assigns IP addresses and network configuration to devices on a network.
DNSDomain Name System: Hierarchical naming system that translates human-readable domain names to IP addresses.
FTPFile Transfer Protocol: Protocol for transferring files over TCP using port 21 for control and port 20 for data, transmitting in cleartext.
FTPSFile Transfer Protocol Secure: FTP with added TLS/SSL encryption for secure file transfers.
GREGeneric Routing Encapsulation: Tunneling protocol that encapsulates various network layer protocols inside point-to-point connections.
HTTPHypertext Transfer Protocol: Application layer protocol for transmitting web content over TCP port 80, without encryption.
HTTPSHypertext Transfer Protocol Secure: HTTP encrypted with TLS over TCP port 443, providing confidentiality and integrity for web traffic.
ICMPInternet Control Message Protocol: Network protocol used for diagnostic and error-reporting purposes, including ping and traceroute.
IMAPInternet Message Access Protocol: Email retrieval protocol on port 143 that syncs messages on the server, allowing multi-device access.
IPInternet Protocol: Layer 3 protocol responsible for addressing and routing packets between hosts across networks.
L2TPLayer 2 Tunneling Protocol: VPN tunneling protocol that encapsulates PPP frames; typically paired with IPSec for encryption.
MPLSMultiprotocol Label Switching: High-performance routing technique that directs data using labels rather than complex routing lookups.
NATNetwork Address Translation: Technique that maps private IP addresses to a public IP address for internet communication.
NTPNetwork Time Protocol: Protocol synchronizing clocks across network devices using UDP port 123, critical for log correlation.
PATPort Address Translation: NAT variant that maps multiple private IP addresses to a single public IP using different port numbers.
POP3Post Office Protocol v3: Email retrieval protocol on port 110 that downloads messages and typically removes them from the server.
RDPRemote Desktop Protocol: Microsoft protocol on port 3389 providing graphical remote access to Windows systems.
SCPSecure Copy Protocol: File transfer protocol using SSH encryption to securely copy files between hosts.
SFTPSSH File Transfer Protocol: Secure file transfer protocol running over SSH, providing encryption and authentication on port 22.
SHTTPSecure Hypertext Transfer Protocol: Deprecated protocol for encrypting individual HTTP messages at the application layer.
SMTPSimple Mail Transfer Protocol: Protocol for sending email messages between servers on TCP port 25, with port 587 for submission.
SNMPSimple Network Management Protocol: Protocol for monitoring and managing network devices, using agents and a management station via UDP ports 161/162.
SRTPSecure Real-Time Transport Protocol: Protocol providing encryption and authentication for RTP streams, securing VoIP and video communications.
SSHSecure Shell: Encrypted protocol on port 22 providing secure remote command-line access and file transfer.
SSIDService Set Identifier: Human-readable name identifying a wireless network, broadcast by access points.
TCPTransmission Control Protocol: Connection-oriented Layer 4 protocol providing reliable, ordered delivery through three-way handshake and acknowledgments.
TTLTime to Live: Value limiting the lifetime of data in a network; in IP it counts hops, in DNS it defines cache duration.
UDPUser Datagram Protocol: Connectionless Layer 4 protocol offering fast, low-overhead delivery without guaranteed ordering or reliability.
WAPWireless Access Point: Networking device that allows wireless devices to connect to a wired network using Wi-Fi.

Networking Fundamentals (1)

RFCRequest for Comments: Publication series by IETF documenting internet standards, protocols, and best practices.

Operating Systems (2)

BitLockerBitLocker Drive Encryption: Windows full-disk encryption feature using AES and typically the TPM chip for key protection.
OSOperating System: System software managing hardware resources and providing services for application programs.

Physical Security (3)

HVACHeating, Ventilation, and Air Conditioning: Environmental control system critical for maintaining proper temperature and humidity in data centers.
RFIDRadio Frequency Identification: Technology using electromagnetic fields to identify and track tags attached to objects, used in access badges and inventory.
UPSUninterruptible Power Supply: Battery backup providing temporary power during outages, protecting equipment and allowing graceful shutdown.

Security Architecture (34)

BYODBring Your Own Device: Policy allowing employees to use personal devices to access organizational resources and data.
CASBCloud Access Security Broker: Security policy enforcement point between cloud consumers and providers, enforcing enterprise security policies.
CMDBConfiguration Management Database: Repository storing information about IT assets and their relationships, supporting change and asset management.
COPECorporate-Owned, Personally Enabled: Mobile device deployment model where the organization owns the device but allows limited personal use.
CSPCloud Service Provider: Organization that offers cloud computing services such as IaaS, PaaS, or SaaS.
CYODChoose Your Own Device: Mobile deployment model where employees select from a list of approved corporate devices.
DLPData Loss Prevention: Technology and policies that detect and prevent unauthorized exfiltration of sensitive data.
FaaSFunction as a Service: Serverless cloud model where the provider runs individual functions in response to events, scaling automatically.
FPGAField-Programmable Gate Array: Integrated circuit configured by the customer after manufacturing, used in specialized hardware applications.
HAHigh Availability: System design approach ensuring a service remains operational with minimal downtime, often using redundancy and failover.
IaaSInfrastructure as a Service: Cloud model providing virtualized computing resources like VMs, storage, and networking on demand.
ICSIndustrial Control System: Networked systems used to monitor and control industrial processes in critical infrastructure like power plants.
IoTInternet of Things: Network of physical devices with embedded sensors and connectivity that collect and exchange data.
MDMMobile Device Management: Software solution for enrolling, configuring, securing, and monitoring mobile devices in an organization.
MTBFMean Time Between Failures: Average time between system failures, used to measure reliability of repairable systems.
MTTFMean Time to Failure: Average time a non-repairable system operates before failure; used for components that are replaced, not repaired.
MTTRMean Time to Repair: Average time required to restore a failed system to operational status.
NFCNear Field Communication: Short-range wireless technology for contactless data exchange within approximately 4 cm.
OTOperational Technology: Hardware and software that detects or controls physical devices and processes in industrial environments.
PaaSPlatform as a Service: Cloud model providing a development platform with tools, middleware, and runtime managed by the provider.
PLCProgrammable Logic Controller: Industrial control computer used to automate manufacturing processes and equipment operations.
RTOSReal-Time Operating System: OS designed to process data and events within strict time constraints, used in embedded and industrial systems.
SaaSSoftware as a Service: Cloud model delivering fully managed applications accessible via a web browser.
SCADASupervisory Control and Data Acquisition: System for remote monitoring and control of industrial processes in critical infrastructure.
SELinuxSecurity-Enhanced Linux: Linux kernel security module providing mandatory access control policies for fine-grained permission enforcement.
SIMSubscriber Identity Module: Smart card storing mobile subscriber identity, authentication keys, and contacts for cellular access.
SPFSingle Point of Failure: Component whose failure would cause the entire system to stop functioning, addressed through redundancy.
TPMTrusted Platform Module: Hardware chip providing secure generation and storage of cryptographic keys, platform integrity attestation, and sealed storage.
UAVUnmanned Aerial Vehicle: Remotely operated or autonomous aircraft that poses physical security and surveillance risks.
UEMUnified Endpoint Management: Platform managing all endpoint types (mobile, desktop, IoT) from a single console with consistent policy enforcement.
VDIVirtual Desktop Infrastructure: Technology hosting desktop environments on a centralized server, with users accessing them remotely.
VMVirtual Machine: Software-emulated computer running its own OS on a hypervisor, isolated from the physical host.
VPCVirtual Private Cloud: Isolated virtual network within a public cloud environment with its own IP range, subnets, and security policies.
ZTNAZero Trust Network Access: Security model granting access based on continuous verification of identity, device, and context rather than network location.

Security Operations (29)

AISAutomated Indicator Sharing: DHS service enabling real-time exchange of machine-readable cyber threat indicators between organizations.
ATT&CKAdversarial Tactics, Techniques, and Common Knowledge: MITRE framework cataloging known adversary behaviors and tactics used in cyber intrusions.
AVAntivirus: Software that detects, prevents, and removes malicious software from systems.
CERTComputer Emergency Response Team: Team of security experts handling cybersecurity incidents and coordinating response efforts.
CIRTComputer Incident Response Team: Organizational team responsible for detecting, analyzing, and responding to security incidents.
CSIRTComputer Security Incident Response Team: Specialized team providing incident handling services including analysis, containment, and recovery.
DAMDatabase Activity Monitoring: Security technology that monitors and audits database access to detect unauthorized or suspicious queries.
EDREndpoint Detection and Response: Security solution that continuously monitors endpoints for suspicious activity and enables rapid investigation and response.
FIMFile Integrity Monitoring: Security control that detects unauthorized changes to critical system files and configurations.
HIDSHost-based Intrusion Detection System: Security agent monitoring a single host for suspicious activity, file changes, and policy violations.
HIPSHost-based Intrusion Prevention System: Security agent that monitors and can block malicious activity on a host in real time.
IDSIntrusion Detection System: Security system that monitors network or host activity for malicious behavior and generates alerts.
IoCIndicator of Compromise: Forensic artifact or observable that suggests a system has been breached, such as unusual traffic or file hashes.
IPSIntrusion Prevention System: Inline security system that monitors, detects, and actively blocks malicious network activity.
IRIncident Response: Organized approach to detecting, managing, and recovering from cybersecurity incidents.
MDRManaged Detection and Response: Outsourced security service providing 24/7 threat monitoring, detection, and incident response.
NIDSNetwork-based Intrusion Detection System: System monitoring network traffic for suspicious patterns and generating alerts for potential intrusions.
NIPSNetwork-based Intrusion Prevention System: Inline system that monitors network traffic and actively blocks detected threats in real time.
OSINTOpen-Source Intelligence: Intelligence collected from publicly available sources such as websites, social media, and public records.
OVALOpen Vulnerability and Assessment Language: Standardized XML language for expressing security vulnerability assessment and configuration data.
SIEMSecurity Information and Event Management: Platform aggregating and correlating log data from across the environment to detect threats and support incident response.
SOARSecurity Orchestration, Automation, and Response: Platform that integrates security tools and automates incident response workflows to reduce analyst workload.
SOCSecurity Operations Center: Centralized team and facility that monitors, detects, analyzes, and responds to cybersecurity incidents 24/7.
STIXStructured Threat Information eXpression: Standardized language for describing cyber threat information in a structured, machine-readable format.
SYSLOGSystem Logging Protocol: Standard protocol for forwarding log messages from network devices to a centralized logging server on UDP port 514.
TAXIITrusted Automated eXchange of Intelligence Information: Transport protocol for sharing STIX cyber threat intelligence data between organizations.
WIDSWireless Intrusion Detection System: System monitoring wireless network traffic for unauthorized access points and suspicious activity.
WIPSWireless Intrusion Prevention System: System that detects and automatically mitigates wireless threats like rogue access points.
XDRExtended Detection and Response: Security platform integrating data from endpoints, networks, and cloud to provide unified threat detection and response.

Security Program Management (33)

ALEAnnualized Loss Expectancy: Expected monetary loss from a risk per year, calculated as SLE multiplied by ARO.
AROAnnualized Rate of Occurrence: Estimated frequency of a threat occurring within a single year, used in quantitative risk analysis.
AUPAcceptable Use Policy: Organizational policy defining permitted and prohibited uses of IT systems and data.
BCPBusiness Continuity Planning: Process of creating plans to ensure critical business functions continue during and after a disaster.
BPABusiness Partnership Agreement: Legal document defining terms, responsibilities, and expectations between business partners.
CCPACalifornia Consumer Privacy Act: California law granting consumers rights over their personal data and imposing obligations on businesses.
CISCenter for Internet Security: Nonprofit organization publishing security benchmarks, best practices, and the CIS Controls framework.
CISOChief Information Security Officer: Senior executive responsible for an organization's information security strategy and program.
CTOChief Technology Officer: Senior executive overseeing an organization's technology strategy and development.
DBADatabase Administrator: Role responsible for managing, securing, and maintaining database systems.
DPOData Protection Officer: Role required by GDPR to oversee data protection strategy, compliance, and data subject requests.
DRPDisaster Recovery Plan: Documented process for restoring IT infrastructure and operations after a catastrophic event.
GDPRGeneral Data Protection Regulation: EU regulation governing the collection, processing, and protection of personal data for EU residents.
HIPAAHealth Insurance Portability and Accountability Act: US law establishing standards for protecting sensitive patient health information.
ISAInterconnection Security Agreement: Agreement documenting the technical security requirements for connecting two organizations' IT systems.
ISOInternational Organization for Standardization: International body developing standards including ISO 27001 for information security management systems.
ISSOInformation Systems Security Officer: Role responsible for ensuring the security of a specific information system and its compliance with policies.
KPIKey Performance Indicator: Measurable value demonstrating how effectively an organization achieves key business or security objectives.
KRIKey Risk Indicator: Metric used to provide an early warning signal of increasing risk exposure in an organization.
MOUMemorandum of Understanding: Non-binding agreement between organizations outlining mutual intentions and expectations for cooperation.
MSAMaster Service Agreement: Contract establishing the terms governing future transactions or agreements between parties.
NDANon-Disclosure Agreement: Legal contract preventing parties from sharing confidential information with unauthorized persons.
NISTNational Institute of Standards and Technology: US federal agency that develops cybersecurity frameworks, standards, and guidelines.
NIST CSFNIST Cybersecurity Framework: Voluntary framework of standards and best practices organized into Identify, Protect, Detect, Respond, and Recover functions.
PCI-DSSPayment Card Industry Data Security Standard: Security standard for organizations handling credit card data, mandating controls for cardholder data protection.
PHIProtected Health Information: Individually identifiable health information regulated by HIPAA, requiring safeguards for privacy.
PIIPersonally Identifiable Information: Data that can be used to identify a specific individual, such as SSN, full name, or biometric records.
RPORecovery Point Objective: Maximum acceptable amount of data loss measured in time, defining backup frequency requirements.
RTORecovery Time Objective: Maximum acceptable downtime before a business function must be restored after a disruption.
SLAService Level Agreement: Contract defining measurable service targets like uptime, response time, and support levels between provider and client.
SLESingle Loss Expectancy: Monetary value of loss from a single occurrence of a specific risk event.
SOWStatement of Work: Document defining the specific tasks, deliverables, and timelines for a project or service engagement.
SOXSarbanes-Oxley Act: US federal law mandating financial reporting controls and auditing requirements for publicly traded companies.

Threats and Vulnerabilities (9)

APTAdvanced Persistent Threat: Sophisticated, long-term cyberattack where an intruder gains and maintains unauthorized access, typically state-sponsored.
CVECommon Vulnerabilities and Exposures: Standardized catalog of publicly known cybersecurity vulnerabilities, each assigned a unique identifier.
CVSSCommon Vulnerability Scoring System: Open framework for rating the severity of security vulnerabilities on a 0-10 scale.
DDoSDistributed Denial of Service: Attack using multiple compromised systems to flood a target, overwhelming its capacity to serve legitimate requests.
DoSDenial of Service: Attack that disrupts a service by overwhelming it with traffic or exploiting a vulnerability to make it unavailable.
MaaSMalware as a Service: Criminal business model where threat actors sell or lease malware kits to less-skilled attackers.
MITMMan-in-the-Middle: Attack where an adversary secretly intercepts and potentially alters communication between two parties.
RaaSRansomware as a Service: Criminal business model where ransomware developers license their tools to affiliates in exchange for a cut of ransom payments.
TTPTactics, Techniques, and Procedures: Patterns of behavior and methods used by threat actors, forming the basis for threat intelligence analysis.

Memorize acronyms by using them

Acronyms stick once you have had to use one to answer a question. Take a free practice test and see which ones you still mix up.

Start Free Practice Test