Glossary
Glossary
Security terms, in plain English.
Short, clear definitions of the security and compliance terms startups run into.
Glossary
Glossary
What is ISO 27002 ?
ISO 27002 is the guidance document that explains how to implement each of the controls listed in ISO 27001 Annex…
Glossary
EDR Explained: Endpoint Detection and Response
EDR watches what actually happens on laptops and servers, records it, and lets you detect and shut down an attack…
Glossary
Email Security: Phishing, Spoofing and DMARC
Email security is the set of controls that stop phishing, impersonation and malicious attachments from reaching your team, and stop…
Glossary
DAST Explained: Dynamic Application Security Testing
DAST tests a running application from the outside, sending real requests the way an attacker would, to find weaknesses that…
Glossary
ISO 27001 Annex A Controls Explained
Annex A is the catalogue of 93 security controls published with ISO 27001. You select from it based on your…
Glossary
DPDP Act: Rules, Deadlines and Penalties
The DPDP Act is India’s data protection law. It sets the rules for how organisations may collect, use and store…
Glossary
Risk Treatment Plan: Options and What to Record
A risk treatment plan records what you decided to do about each risk you identified, which controls implement that decision,…
Glossary
Risk Assessment: Steps and the Risk Register
A risk assessment is the process of working out what could go wrong with the information you hold, how likely…
Glossary