Legal and Ethical Frameworks
Expert-defined terms from the Certificate in Insider Threat Management course at LearnUNI. Free to read, free to share, paired with a professional course.
Access Control refers to the process of granting or denying access to res… #
Related terms include authentication, authorization, and identity management. In the context of insider threat management, access control is essential for protecting against internal threats, such as employees or contractors who may attempt to access or exploit sensitive information for personal gain or malicious purposes.
Accountability is the state of being responsible for one's actions, and i… #
Related terms include auditing, logging, and monitoring. Accountability is critical for maintaining trust and ensuring that individuals understand that their actions will be monitored and may have consequences.
Advanced Persistent Threats (APTs) refer to sophisticated, targeted attacks by <… #
Related terms include malware, phishing, and zero-day exploits. APTs are particularly challenging to detect and respond to, as they often involve customized malware and exploit multiple vulnerabilities.
Anomaly Detection refers to the process of identifying patterns or behavi… #
Related terms include machine learning, predictive analytics, and behavioral analysis. Anomaly detection can help identify unusual activity, such as a user accessing sensitive data outside of work hours or attempting to transfer large amounts of data to an external device.
Authentication refers to the process of verifying the identity of users,… #
Related terms include authorization, identity management, and single sign-on. Authentication can be based on various factors, such as passwords, biometrics, or smart cards.
Authorization refers to the process of granting or denying access to reso… #
Related terms include access control, identity management, and role-based access control. Authorization is essential for ensuring that users only have access to the resources and data necessary to perform their jobs.
Behavioral Analysis refers to the study of human behavior, including user… #
Related terms include anomaly detection, machine learning, and predictive analytics. Behavioral analysis can help identify patterns of behavior that may indicate a security threat, such as a user accessing sensitive data in an unusual way or attempting to bypass security controls.
Certification and Accreditation refer to the process of verifying that a… #
Related terms include compliance, governance, and risk management. Certification and accreditation can help ensure that systems are properly secured and meet regulatory requirements.
Cloud Computing refers to the delivery of computing resources, such as se… #
Related terms include cloud security, data encryption, and virtualization. Cloud computing has become increasingly popular, but also requires careful consideration of security and risk management.
Compliance refers to the state of adhering to laws, regulations, and stan… #
Related terms include governance, risk management, and regulatory requirements. Compliance is essential for maintaining trust and ensuring that organizations meet their legal and regulatory obligations.
Counterintelligence refers to the activities aimed at detecting, preventi… #
Related terms include intelligence gathering, threat analysis, and security awareness. Counterintelligence can help organizations stay ahead of potential threats and protect sensitive information.
Cybersecurity refers to the practice of protecting electronic information… #
Related terms include information security, network security, and threat management. Cybersecurity is essential for protecting against a wide range of threats, including malware, phishing, and denial-of-service attacks.
Data Encryption refers to the process of converting plaintext data into u… #
Related terms include data protection, cryptography, and secure communication. Data encryption can help ensure that data is protected both in transit and at rest.
Data Loss Prevention (DLP) refers to the process of detecting, preventing… #
Related terms include data protection, incident response, and security awareness. DLP can help identify and prevent data breaches, as well as respond to and contain incidents.
Digital Forensics refers to the science of collecting, analyzing, and pre… #
Related terms include incident response, threat analysis, and security investigations. Digital forensics can help identify the cause and extent of a security incident, as well as provide evidence for legal proceedings.
Disaster Recovery refers to the process of recovering from a disaster or… #
Related terms include business continuity planning, incident response, and crisis management. Disaster recovery can help ensure that organizations can quickly recover from a disaster and minimize downtime and losses.
Employee Monitoring refers to the process of tracking and monitoring empl… #
Related terms include surveillance, auditing, and logging. Employee monitoring can help identify unusual behavior or activity that may indicate a security threat.
Ethics refers to the study of moral principles and values, and is a criti… #
Related terms include compliance, governance, and risk management. Ethics can help ensure that organizations and individuals behave in a responsible and trustworthy manner.
Governance refers to the process of overseeing and managing an organizati… #
Related terms include compliance, risk management, and regulatory requirements. Governance can help ensure that organizations are properly managed and that security and risk management are integrated into overall business operations.
Incident Response refers to the process of responding to and managing sec… #
Related terms include threat management, security investigations, and crisis management. Incident response can help minimize the impact of a security incident and quickly restore normal operations.
Information Security refers to the practice of protecting electronic info… #
Related terms include cybersecurity, network security, and threat management. Information security is essential for protecting against a wide range of threats, including malware, phishing, and denial-of-service attacks.
Insider Threat refers to the threat posed by individuals with authorized… #
Related terms include security risks, threat management, and counterintelligence. Insider threats can be particularly challenging to detect and respond to, as they often involve trusted individuals with authorized access.
Intelligence Gathering refers to the process of collecting and analyzing… #
Related terms include threat analysis, security awareness, and counterintelligence. Intelligence gathering can help organizations stay ahead of potential threats and protect sensitive information.
Investigations refer to the process of gathering and analyzing evidence t… #
Related terms include digital forensics, threat analysis, and security investigations. Investigations can help identify the root cause of a security incident and provide evidence for legal proceedings.
Malware refers to software that is designed to harm or exploit a computer… #
Related terms include viruses, Trojan horses, and spyware. Malware can be particularly challenging to detect and respond to, as it often involves customized code and exploit multiple vulnerabilities.
Network Security refers to the practice of protecting computer networks f… #
Related terms include cybersecurity, information security, and threat management. Network security is essential for protecting against a wide range of threats, including malware, phishing, and denial-of-service attacks.
Operational Security refers to the process of protecting operational asse… #
Related terms include cybersecurity, information security, and threat management. Operational security is essential for protecting against a wide range of threats, including malware, phishing, and denial-of-service attacks.
Password Management refers to the process of managing and securing passwo… #
Related terms include authentication, authorization, and identity management. Password management can help ensure that passwords are strong, unique, and properly secured.
Phishing refers to the attempt to trick or deceive individuals into revea… #
Related terms include social engineering, spear phishing, and whaling. Phishing can be particularly challenging to detect and respond to, as it often involves customized emails or websites.
Physical Security refers to the process of protecting physical assets, su… #
Related terms include access control, surveillance, and security awareness. Physical security is essential for protecting against a wide range of threats, including theft, vandalism, and sabotage.
Predictive Analytics refers to the use of statistical models and machine… #
Related terms include anomaly detection, machine learning, and threat analysis. Predictive analytics can help organizations stay ahead of potential threats and protect sensitive information.
Regulatory Requirements refer to the laws and regulations that govern an… #
Related terms include compliance, governance, and risk management. Regulatory requirements can help ensure that organizations meet their legal and regulatory obligations.
Risk Management refers to the process of identifying, assessing, and miti… #
Related terms include threat management, security awareness, and compliance. Risk management can help organizations identify and mitigate potential security threats, as well as reduce the likelihood and impact of security incidents.
Security Awareness refers to the state of being aware of security risks a… #
Related terms include security training, security education, and security culture. Security awareness can help ensure that individuals understand the importance of security and take steps to protect sensitive information.
Security Investigations refer to the process of gathering and analyzing e… #
Related terms include digital forensics, threat analysis, and investigations. Security investigations can help identify the root cause of a security incident and provide evidence for legal proceedings.
Security Training refers to the process of educating individuals on secur… #
Related terms include security awareness, security education, and security culture. Security training can help ensure that individuals understand the importance of security and take steps to protect sensitive information.
Social Engineering refers to the attempt to trick or deceive individuals… #
Related terms include phishing, spear phishing, and whaling. Social engineering can be particularly challenging to detect and respond to, as it often involves customized emails or websites.
Threat Analysis refers to the process of identifying and assessing potent… #
Related terms include risk management, security awareness, and intelligence gathering. Threat analysis can help organizations identify and mitigate potential security threats, as well as reduce the likelihood and impact of security incidents.
Threat Management refers to the process of identifying, assessing, and mi… #
Related terms include risk management, security awareness, and intelligence gathering. Threat management can help organizations identify and mitigate potential security threats, as well as reduce the likelihood and impact of security incidents.
User Activity Monitoring refers to the process of tracking and monitoring… #
Related terms include employee monitoring, surveillance, and security awareness. User activity monitoring can help identify unusual behavior or activity that may indicate a security threat.
Vulnerability Management refers to the process of identifying, assessing,… #
Related terms include risk management, security awareness, and threat management. Vulnerability management can help organizations identify and mitigate potential security threats, as well as reduce the likelihood and impact of security incidents.
Zero #
Day Exploits refer to attacks that take advantage of previously unknown vulnerabilities, and are a common threat in insider threat management, as they can be used to gain unauthorized access or steal sensitive information. Related terms include advanced persistent threats, malware, and spear phishing. Zero-day exploits can be particularly challenging to detect and respond to, as they often involve customized code and exploit multiple vulnerabilities.