Archives Glossary Terms

RBAC

Role-based Access Control A method of managing logical access to applications or network services based on an individuals role within an organisation. This may be based on the department their work within, their seniority within a company or a combination…

TCO

Total Cost of Ownership An estimate of the direct and indirect costs of purchasing and operating an asset over its life time.  Often used to promote the benefits of or Subscription products, rather than a capital outlay to acquire a…

DLP

Data Loss Prevention Software, Systems or Business Processes designed to minimise the threat of data leakage. Examples including policies applied to mail servers to detect and quarantine messages contain sensitive data.

SDLC

Systems Development Life Cycle The process of designing, developing, Testing and Maintaining Software throughout its life cycle. This can also be incorporated in to a Secure Development Process.

ERM

Enterprise Risk Management A method of managing risk across a large/diverse organisation. ERM is often deployed as a management framework including a risk assessment, register and treatment plans, as well as identifying opportunities. Risks can address commercial, continuity, security, safety, quality, environmental and…

UI

UI or GUI User Interface / Graphical User Interface The part of a system that users interacts with, user interfaces should be easy to use, intuitive and accessible.  A user interface connects the human to the machine.

UX

User Experience A discipline in design and software development focused on enhancing the user’s satisfaction with a product by making it intuitive to use, accessible and easy to interact with. UX designers will focus on the user facing parts of…

M&A

Mergers and Acquisitions M&A is an abbreviation for Mergers & Acquisitions, the process of companies joining together, or one  entity being purchased by another. See also: Mergers & Acquisitions: Management System Continuity  

CSIRT

Computer Security Incident Response Team A group of people responsible for managing computer security incidents. May also be referred to as CERT (Computer emergency response teams)

BAFO

Best and Final Offer Often used in property sales, but also extends to purchasing and procurement processes; best and final offer is the seller’s last opportunity to adjust pricing before the buyer makes a selection.