Glossary · MWE Terms · C
L1 — paginated flat list. Pick a POS, pick a letter.
TermTypeDefinitionClassificationsUpdated
customer accountnounMWEA client's formal contract with an individual or organization whereby the client receives goods or services.verified
customer data privacynounMWEThe ability an organization or individual has to determine what customer data in a computer system can be shared with third parties.verified
customer educational materialnounMWEEducational materials used to inform customers about topics regarding the products and/or services that they use.verified
customer informationnounMWEA term used in the Information Security Standards to mean any record containing non-public personal information about a customer, whether in paper, electronic, or other form, that is maintained by or on behalf of a financial institution.verified
customer information systemnounMWEFor purposes of the Information Security Standards, “customer information systems” means any methods used to access, collect, store, use, transmit, protect, or dispose of customer information.verified
Customer ServicenounMWEThe purpose of this function is to provide and manage information delivery and support to an organization's clients regarding its products and/or services.verified
Customer Service and Technical SupportnounMWEIn the NICE Workforce Framework, cybersecurity work where a person: Addresses problems, installs, configures, troubleshoots, and provides maintenance and training in response to customer requirements or inquiries (e.g., tiered-level customer support).verified
Customer's BrokernounMWEsomeone in charge of a client's account for an advertising agency or brokerage or other service businessverified
Customer's MannounMWEsomeone in charge of a client's account for an advertising agency or brokerage or other service businessverified
Customs UnionnounMWEan association of nations to promote free trade within the union and set common tariffs for nations that are not membersverified
cut inverbMWEto drive in front of another vehicle leaving too little space for that vehicle to maneuver comfortablyverified
cut offverbMWEto pull in front of another car, leaving a dangerously small amount of space between the twoverified
cut shortverbMWEto terminate or abbreviate before its intended or proper end or its full extentverified
Cutaneous AnthraxnounMWEa form of anthrax infection that begins as papule that becomes a vesicle and breaks with a discharge of toxinsverified
Cutaneous SensesnounMWEthe faculty by which external objects or forces are perceived through contact with the body (especially the hands)verified
Cutaneous VeinnounMWEone of a number of veins in the subcutaneous tissue that empty into deep veinsverified
Cutaway DrawingnounMWEa representation (drawing or model) of something in which the outside is omitted to reveal the inner partsverified
Cutaway ModelnounMWEa representation (drawing or model) of something in which the outside is omitted to reveal the inner partsverified
Cutleaved ConeflowernounMWEtall leafy plant with erect branches ending in large yellow flower heads with downward-arching raysverified
Cutting AnglenounMWEthe angle between the face of a cutting tool and the surface of the workverified
Cy PresnounMWEa rule that when literal compliance is impossible the intention of a donor or testator should be carried out as nearly as possibleverified
Cy Pres DoctrinenounMWEa rule that when literal compliance is impossible the intention of a donor or testator should be carried out as nearly as possibleverified
Cyanic AcidnounMWEa colorless poisonous volatile liquid acid that hydrolyzes readily to ammonia and carbon dioxideverified
Cyanide ProcessnounMWEan industrial process for extracting gold and silver by treating ore with a sodium cyanide solutionverified
Cyanine DyenounMWEany of a class of dyes containing a -CH= group linking two heterocyclic rings containing nitrogenverified
cyber assetnounMWEProgrammable electronic devices and communication networks including hardware, software and data.verified
Cyber AttacknounMWEAn attack, via cyberspace, targeting an enterprise’s use of cyberspace for the purpose of disrupting, disabling, destroying, or maliciously controlling a computing environment/infrastructure; or destroying the integrity of the data or stealing controlled information.verified
cyber ecosystemnounMWEThe interconnected information infrastructure of interactions among persons, processes, data, and information and communications technologies, along with the environment and conditions that influence those interactions.verified
cyber eventnounMWEA cybersecurity change or occurrence that may have an impact on organizational operations (including mission, capabilities, or reputation).verified
cyber exercisenounMWEA planned event during which an organization simulates a cyber disruption to develop or test capabilities such as preventing, detecting, mitigating, responding to or recovering from the disruption.verified
cyber governancenounMWEArrangements an organisation puts in place to establish, implement and review its approach to managing cyber risks.verified
cyber incidentnounMWEActions taken through the use of computer networks that result in an actual or potentially adverse effect on an information system and/or the information residing therein. See Incident.verified
cyber incident response plannounMWEThe series of actions and processes associated with a security event associated with 'cyberspace' (i.e. the Internet, corporate networks, etc.).verified
cyber incident response procedurenounMWEA documented series of steps that are taken to detect, triage, and resolve events regarding cybersecurity that disrupt operations and alert applicable personnel and clients in conformance with pertinent standards.verified
cyber incident response roles and responsibilitiesnounMWEThe functions and duties of personnel who are responsible for triaging, and resolving events regarding cybersecurity events that disrupt operations and alerting interested personnel and affected parties in conformance with pertinent standards.verified
cyber infrastructurenounMWEIncludes electronic information and communications systems and services and the information contained in these systems and services. Information and communications systems and services are composed of all hardware and software that process, store, and communicate information, or any combination of all of these elements. Processing includes the creation, access, modification, and destruction of information. Storage includes paper, magnetic, electronic, and all other media types. Communications include sharing and distribution of information. For example: computer systems; control systems (e.g., supervisory control and data acquisition–SCADA); networks, such as the Internet; and cyber services (e.g., managed security services) are part of cyber infrastructure.verified
cyber maturity modelnounMWEA mechanism to have cyber resilience controls, methods and processes assessed according to management best practice, against a clear set of external benchmarks.verified
Cyber OperationsnounMWEIn the NICE Workforce Framework, cybersecurity work where a person: Performs activities to gather evidence on criminal or foreign intelligence entities in order to mitigate possible or real-time threats, protect against espionage or insider threats, foreign sabotage, international terrorist activities, or to support other intelligence activities.verified
Cyber Operations PlanningnounMWEin the NICE Workforce Framework, cybersecurity work where a person: Performs in-depth joint targeting and cyber planning process. Gathers information and develops detailed Operational Plans and Orders supporting requirements. Conducts strategic and operational-level planning across the full range of operations for integrated information and cyberspace operationsverified
cyber resiliencenounMWEThe ability of a system or domain to withstand cyber attacks or failures and, in such events, to reestablish itself quickly.verified
cyber resilience frameworknounMWEConsists of the policies, procedures and controls an FMI has established to identify, protect, detect, respond to and recover from the plausible sources of cyber risks it faces.verified
cyber resilience strategynounMWEAn FMI’s high level principles and medium term plans to achieve its objective of managing cyber risks.verified
Cyber ResiliencynounMWEThe ability to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by cyber resources. [13]verified
cyber risknounMWEThe combination of the probability of an event occurring within the realm of an organisation’s information assets, computer and communication resources and the consequences of that event for an organisation.verified
cyber risk managementnounMWEThe process used by an FMI to establish an enterprise-wide framework to manage the likelihood of a cyber attack and develop strategies to mitigate, respond to, learn from and coordinate its response to the impact of a cyber attack. The management of an FMI’s cyber risk should support the business processes and be integrated in the FMI’s overall risk management framework.verified
cyber risk profilenounMWEThe cyber risk actually assumed, measured at a given point in time.verified
cyber risk tolerancenounMWEThe propensity to incur cyber risk, being the level of cyber risk that an FMI intends to assume in pursuing its strategic objectives.verified
cyber supply chain risk assessment processnounMWEThe foundational task in the cyber supply chain risk assessment process, cyber supply chain risk assessments are aimed at identifying and assessing applicable risk of Information and operational technology (IT/OT) outsourcing, diverse distribution routes, assorted technologies, laws, policies, procedures, and practices.verified
Cyber Supply Chain Risk Management PlannounMWEA plan that includes confidentiality, integrity, and availability controls for mitigating the risks associated with the distributed and interconnected nature of IT/OT product and service supply chains. It covers the entire life cycle of a system (including design, development, distribution, deployment, acquisition, maintenance, and destruction) as supply chain threats and vulnerabilities may intentionally or unintentionally compromise an IT/OT product or service at any stage.verified
cyber supply chain risk management processnounMWEA detailed description of the steps necessary to mitigating the risks associated with the distributed and interconnected nature of IT/OT product and service supply chains. It covers the entire life cycle of a system (including design, development, distribution, deployment, acquisition, maintenance, and destruction) as supply chain threats and vulnerabilities may intentionally or unintentionally compromise an IT/OT product or service at any stage.verified
cyber system recovery plannounMWEA step-by-step outline of the processes and procedures to be performed to bring a cyber system back to working order after an incident has occurred.verified
cyber threatnounMWEAn internal or external circumstance, event, action, occurrence, or person with the potential to exploit technology-based vulnerabilities and to adversely impact (create adverse consequences for) organizational operations, organizational assets (including information and information systems), individuals, other organizations, or society.verified
cyber threat intelligencenounMWEOrganized, analyzed and refined information about potential or current attacks that threaten an organization. The primary purpose of threat intelligence is helping organizations understand the risks of the most common and severe external threats, such as zero-day threats, advanced persistent threats (APTs) and exploits. Although threat actors also include internal (or insider) and partner threats, the emphasis is on the types that are most likely to affect a particular organization's environment. Threat intelligence includes in-depth information about specific threats to help an organization protect itself from the types of attacks that could do them the most damage. In a military, business or security context, intelligence is information that provides an organization with decision support and possibly a strategic advantage. Threat intelligence is a component of security intelligence and, like SI, includes both the information relevant to protecting an organization from external and inside threats as well as the processes, policies and tools designed to gather and analyze that information. Threat intelligence services provide organizations with current information related to potential attack sources relevant to their businesses; some also offer consultation service.verified
cyber threat response strategynounMWEA plan of action designed to achieve a long-term or overall aim regarding how to resolve cyber incidents.verified
cyber-physical systemnounMWEInteracting digital, analog, physical, and human components engineered for function through integrated physics and logic.verified
cybersecurity activitynounMWESecurity controls that are specific to the realm of Cybersecurity.verified
Cybersecurity and Infrastructure Security AgencynounMWECISA: Cybersecurity and Infrastructure Security Agencyverified