Glossary · Nouns · A
L1 — paginated flat list. Pick a POS, pick a letter.
TermTypeDefinitionClassificationsUpdated
Audit Reduction ToolsnounMWEPreprocessors designed to reduce the volume of audit records to facilitate manual review. Before a security review, these tools can remove many audit records known to have little security significance. These tools generally remove records generated by specified classes of events, such as records generated by nightly backups.Capability
audit reportnounMWEA report issued by an independent Auditor that expresses an opinion about whether the financial statements present fairly a company's financial position, operating results, and cash flows in accordance with generally accepted accounting principles.ArtifactRegulated
audit resourcenounMWEThe materials that are used by auditors to conduct an audit.ArtifactConfidential
Audit ReviewnounMWEThe assessment of an information system to evaluate the adequacy of implemented security controls, assure that they are functioning properly, identify vulnerabilities, and assist in implementation of new security controls where required. This assessment is conducted annually or whenever significant change has occurred and may lead to recertification of the information system.ProcessRegulatedCUI
audit schedulenounMWEThe dates on which a planned, official examination of a system or equipment will be performed.ArtifactInternal
audit scopenounMWEDetermination of the range of the activities and the period (months or years) of records that are to be subjected to an audit examination.RequirementInternal
audit standardnounMWERules prescribed for auditors by various national and international organizations such as the Auditing Practices Board (in the UK) and the Auditing Standards Board (in the US).FrameworkRegulated
Audit trailnounMWEA chronological record that reconstructs and examines the sequence of activities surrounding or leading to a specific operation, procedure, or event in a security relevant transaction from inception to final result.ArtifactRegulated
audit universenounMWEAn inventory of audit areas that is compiled and maintained to identify areas for audit during the audit planning process.ArtifactInternal
Audit Work PapernounMWEThis record category contains records of working papers that are vital to the successful accomplishment of all audit assignments performed.ArtifactRegulated
Audited AccountnounMWEan inspection of the accounting procedures and records by a trained accountant or CPAverified
AuditingnounAuditing is the information gathering and analysis of assets to ensure such things as policy compliance and security from vulnerabilities.Process
auditornounA person who conducts audits from either inside or outside of the organization being audited.Role
Auditory AphasianounMWEan impairment in understanding spoken language that is not attributable to hearing lossverified
Auditory ApparatusnounMWEall of the components of the organ of hearing including the outer and middle and inner earsverified
Auditory AreanounMWEthe cortical area that receives auditory information from the medial geniculate bodyverified
Auditory CanalnounMWEeither of the passages in the outer ear from the auricle to the tympanic membraneverified
Auditory CenternounMWEthe part of the brain (in a fold of the cerebral cortex of the temporal lobe on both sides of the brain) that receives impulses from the ear by way of the auditory nerveverified
Auditory CortexnounMWEthe cortical area that receives auditory information from the medial geniculate bodyverified
Auditory HyperesthesianounMWEabnormal acuteness of hearing due to increased irritability of the sensory neural mechanismverified
Auditory MeatusnounMWEeither of the passages in the outer ear from the auricle to the tympanic membraneverified
Auditory NervenounMWEa composite sensory nerve supplying the hair cells of the vestibular organ and the hair cells of the cochleaverified
Auditory OssiclenounMWEossicles of the middle ear that transmit acoustic vibrations from the eardrum to the inner earverified
Auditory TubenounMWEeither of the paired tubes connecting the middle ears to the nasopharynxverified
Augitenoundark-green to black glassy mineral of the pyroxene group containing large amounts of aluminum and iron and magnesiumverified
Augmentationnounthe statement of a theme in notes of greater duration (usually twice the length of the original)verified
Auranouna sensation (as of a cold breeze or bright light) that precedes the onset of certain disorders such as a migraine attack or epileptic seizureverified
Auriclenouna small conical pouch projecting from the upper anterior part of each atrium of the heartverified
Auricula AtriinounMWEa small conical pouch projecting from the upper anterior part of each atrium of the heartverified
Auricular PointnounMWEthe craniometric point at the center of the opening of the external acoustic meatusverified
Auricularenounthe craniometric point at the center of the opening of the external acoustic meatusverified
Auroranounan atmospheric phenomenon consisting of bands of light caused by charged solar particles following the earth's magnetic lines of forceverified
Auscultationnounthe process of listening to sounds within the body, usually with a stethoscopeverified
Austenitic Manganese SteelnounMWEa steel with a relatively large component (10-14%) of manganeseverified
Austenitic SteelnounMWEsteel that has enough nickel and chromium or manganese to retain austenite at atmospheric temperaturesverified
Autacoidnounany physiologically active internal secretion especially one of uncertain classificationverified
Auteurnouna filmmaker who has a personal style and keeps creative control over his or her worksverified
AuthenticationnounThe process of verifying the identity or other attributes claimed by or assumed of an entity (user, process, or device), or to verify the source and integrity of data.Capability
Authentication CodenounMWEA cryptographic checksum based on an Approved security function (also known as a Message Authentication Code [MAC]).CredentialRegulated
authentication controlnounMWEOne of several systems which restrict user access to a network.ControlRegulated
authentication mechanismnounMWEHardware or software-based mechanisms that forces users, devices, or processes to prove their identity before accessing data on an information system.Control
authentication methodnounMWEA method of Verifying the identity of a user, such as a challenge password or a digital certificate.ControlRegulated
Authentication ModenounMWEA block cipher mode of operation that can provide assurance of the authenticity and, therefore, the integrity of data.Control
Authentication PeriodnounMWEThe maximum acceptable period between any initial authentication process and subsequent reauthentication processes during a single terminal session or during the period data is being accessed.RequirementRegulatedCUI
authentication procedurenounMWEThe documented steps necessary to authenticate the identity of an entity through the use of credentials in order to gain access to the system.Requirement
Authentication ProtocolnounMWEA defined sequence of messages between a Claimant and a Verifier that demonstrates that the Claimant has possession and control of a valid token to establish his/her identity, and optionally, demonstrates to the Claimant that he or she is communicating with the intended Verifier.ProcessRegulated
Authentication TagnounMWEA pair of bit strings associated to data to provide assurance of its authenticity.Artifact
Authentication TokennounMWEAuthentication information conveyed during an authentication exchange.Credential
AuthenticatornounThe means used to confirm the identity of a user, process, or device (e.g., user password or token).Credential
AuthenticitynounThe property of being genuine and being able to be verified and trusted; confidence in the validity of a transmission, a message, or message originator. See Authentication.Capability
Authoring LanguagenounMWEsoftware that can be used to develop interactive computer programs without the technically demanding task of computer programmingverified
Authoritarian RegimenounMWEa government that concentrates political power in an authority not responsible to the peopleverified
Authoritarian StatenounMWEa government that concentrates political power in an authority not responsible to the peopleverified
Authoritarianismnouna form of government in which the ruler is an absolute dictator (not restricted by a constitution or laws or opposition etc.)verified
AuthoritynounPerson(s) or established bodies with rights and responsibilities to exert control in an administrative sphere.Organization