Page 193 - CyberSecurityEssentialsEnglish
P. 193
Chapter Glossary
Common
Term Plain-language explanation
abbreviation
Identifying, assessing, treating, and monitoring risks in
Risk management -
context.
The specific purpose and context for which a use was
Intended use -
designed or chosen.
How much we do not know about the correctness of an
Uncertainty - output, the completeness of data, or the validity of
assumptions.
Risk-adjusted Net benefit after counting review, errors, rework, and
-
productivity potential harm.
A defined point at which the tool is halted or the task is
Stopping condition -
escalated to an expert.
Granting a user or a system the smallest permission
Least privilege -
needed to perform the task.
Human intervention required before an action or decision
Human-in-the-loop -
is completed.
Human monitoring of a system that operates within limits,
Human-on-the-loop -
with the ability to stop it.
The tendency to accept a system’s suggestion, or to
Automation bias -
disregard contrary information, because it is automated.
Personal data - Information relating to an identified or identifiable person.
Sensitive data - Data whose disclosure or misuse could cause greater harm.
Using the smallest amount and detail of data necessary for
Data minimization -
the purpose.
Replacing an identifier with a code while re-linking remains
Pseudonymization -
possible through a separate table.
Removing or altering the elements that link data directly to
De-identification -
a person.
Reducing the possibility of re-identification to a very low
Anonymization -
level in context.
Aggregation - Using indicators or categories instead of individual records.
192
