Go to blog

senhasegura Glossary of Terms

Trust senhasegura to provide accurate and up-to-date cybersecurity definitions, helping you make sense of the complex world of access and identity management.
ABCDEFGHIJKLMNOPQRSTUVWXYZ

A

Access Certification

Access Certification is a process in which organizations periodically verify that the access rights granted to users are appropriate and necessary for their job functions.
Keep reading »

Attribute-Based Access Control (ABAC)

Attribute-Based Access Control (ABAC) is an access control model that determines access rights based on attributes associated with users, resources, and the environment.
Keep reading »

Authentication

Authentication is a fundamental process in both security and identity management, serving as the gatekeeper for accessing systems, networks, and applications.
Keep reading »

Authorization

Authorization is the process of granting or denying specific rights and privileges to a system or network resource.
Keep reading »

B

Break the Glass

Break the Glass is an emergency access protocol used in PAM to provide immediate and time-limited access to critical systems in exceptional circumstances.
Keep reading »

C

Contextual Authentication

Contextual Authentication, also known as adaptive authentication or risk-based authentication, is a dynamic approach to verifying user identities that considers the context of a login attempt or transaction.
Keep reading »

Credential

A credential is any piece of information that serves as a form of identification to authenticate an entity, usually for the purpose of gaining access to resources within an information system.
Keep reading »

Cybersecurity Mesh Architecture

Cybersecurity Mesh is a modern architectural approach to scalable, flexible, and reliable cybersecurity control.
Keep reading »

D

Data Breach

A data breach is a security incident in which sensitive, protected, or confidential data is accessed, disclosed, or stolen without authorization.
Keep reading »

Data Leak

A data leak occurs when sensitive, confidential, or protected information is released unintentionally into an untrusted environment.
Keep reading »

DevOps

DevOps is a set of practices and cultural philosophies that aim to unify software development (Dev) and software operation (Ops).
Keep reading »

DevSecOps

DevSecOps, short for Development, Security, and Operations, extends the DevOps framework by integrating security practices into every phase of the software development lifecycle.
Keep reading »

Digital Certificate

A digital certificate, also known as a public key certificate or identity certificate, is a digital document used to prove the ownership of a public key.
Keep reading »

Directory Services

Directory Services are a crucial component of network management that store, organize, and provide access to information about network resources and users.
Keep reading »

Disaster Recovery (DR)

Disaster Recovery (DR) is a strategic plan and series of procedures implemented to ensure the continuity and recovery of vital technology infrastructure and systems following a disaster.
Keep reading »

F

Federated Identity Management (FIM)

Federated Identity Management (FIM) is a system that allows users to access multiple applications and services using a single set of credentials managed by one organization.
Keep reading »

H

High Availability (HA)

High Availability (HA) refers to systems and components that are engineered to operate continuously without failure for a desired length of time.
Keep reading »

I

Identity Access Management (IAM)

Identity and Access Management (IAM) is a framework of processes and technologies used to manage digital identities, control user access to resources, and ensure secure and compliant access within an organization.
Keep reading »

Identity Analytics

Identity Analytics refers to the use of data analytics techniques to manage and mitigate risks associated with user identities and access within an organization.
Keep reading »

IT Governance

IT Governance (ITG) encompasses the processes and structures that ensure the effective and efficient use of Information Technology (IT) to help an organization achieve its goals.
Keep reading »

Identity as a Service (IDaaS)

Identity as a Service (IDaaS) is a cloud-based service that provides identity and access management (IAM) capabilities to organizations.
Keep reading »

Identity De-provisioning

Identity de-provisioning refers to the process of formally removing or restricting a user's access rights and privileges from an organization's IT systems and applications.
Keep reading »

Identity Fabric

Identity Fabric is an architectural concept within the realm of IAM that seeks to provide a unified and comprehensive framework for managing identities across a diverse array of environments, systems, and applications.
Keep reading »

Identity-First Security

Identity-First Security is a strategic approach to cybersecurity that prioritizes identity management as the core foundation of all security measures.
Keep reading »

Identity Lifecycle Management

Identity Lifecycle Management (ILM) refers to the comprehensive management of user identities throughout their existence within an organization's systems, from creation to modification to deletion.
Keep reading »

Identity Provider (IdP)

An Identity Provider (IdP) is a system that creates, manages, and authenticates digital identities for users to access various applications and services.
Keep reading »

Identity Provisioning

Identity Provisioning refers to the process of creating, managing, and disabling user accounts and access permissions in IT systems and applications.
Keep reading »

Infrastructure-as-a-Service (SaaS)

Infrastructure-as-a-Service (IaaS) is a form of cloud computing that provides virtualized computing resources over the internet.
Keep reading »

J

Just in Time (JIT) Access

Just in Time (JIT) Access is a security model that minimizes the exposure of resources by granting temporary access to users only when necessary and only for as long as needed.
Keep reading »

L

Load Balancing

Load balancing is a technique used to distribute workloads uniformly across multiple computing resources, such as servers, to optimize resource use, maximize throughput, reduce response time, and ensure reliability.
Keep reading »

M

Multi-Factor Authentication (MFA)

Multi-Factor Authentication is a security system that requires more than one method of authentication from independent categories of credentials to verify the user's identity for a login or other transaction.
Keep reading »

O

OAuth (Open Authorization)

OAuth (Open Authorization) is an open standard for access delegation, commonly used as a way for users to grant websites or applications access to their information on other websites without exposing their passwords.
Keep reading »

On-Premises

On-premises refers to the deployment and hosting of IT infrastructure, including hardware and software, within the physical premises of an organization.
Keep reading »

OpenID Connect

OpenID Connect (OIDC) is an authentication layer on top of the OAuth 2.0 protocol that allows clients to verify the identity of an end-user.
Keep reading »

P

Password Complexity

Password complexity refers to the set of rules or requirements imposed on the creation of a password to ensure it meets certain security standards.
Keep reading »

Passwordless Authentication

Passwordless authentication is a method of verifying a user's identity without requiring them to enter a password.

Keep reading »

Password Management

Password management refers to the process of handling the creation, storage, and maintenance of passwords in a secure manner.
Keep reading »

Password Reset

Password reset refers to the process of setting a new password, replacing the old one that a user may have forgotten, or that may need to be changed for security reasons.
Keep reading »

Password Strength

Password strength refers to the resilience of a password to resist guessing, brute force attacks, and other common methods of compromise.
Keep reading »

Platform-as-a-Service (SaaS)

Platform-as-a-Service (PaaS) is a category of cloud computing services that provides a platform allowing customers to develop, run, and manage applications.
Keep reading »

R

Remote Desktop Protocol (RDP)

Remote Desktop Protocol (RDP) is a secure network communication protocol developed by Microsoft, allowing users to remotely control and operate computers.
Keep reading »

S

SAMA Cybersecurity Framework

The SAMA Cybersecurity Framework is a comprehensive set of guidelines and controls established by the Saudi Arabian Monetary Authority to enhance the cyber resilience of financial institutions in Saudi Arabia.
Keep reading »

Any questions?

We’re here to make cybersecurity and access management accessible for you and your team.

‍Reach out to our team any time with questions or to explore our solutions further.